security-audit

SUSPICIOUS: the skill is internally coherent and not deceptive, but it equips the agent for offensive security auditing/pentesting of web apps and APIs. There is no clear malware, exfiltration path, or installer abuse in the supplied text, yet the capability itself is high-risk for an AI agent and should be tightly controlled.