code-audit

SUSPICIOUS rather than benign: the skill is coherent for authorized code auditing and shows no clear credential theft or exfiltration, but it grants an AI agent offensive-adjacent security review capability. Main risk comes from enabling security scanning/pattern hunting, not from malicious data flow or installer behavior.