agency-threat-detection-engineer

SUSPICIOUS: the skill is broadly aligned with its stated detection-engineering purpose and uses mostly legitimate package sources and official SIEM endpoints, so it is not malware. Risk is elevated because it equips an AI agent with security-operations/threat-hunting capabilities, can autonomously deploy live rules with stored credentials, and explicitly disables TLS verification in the Splunk deployment step.