llm-security

SUSPICIOUS. The skill is internally coherent as an AI security testing/red-team guide, but it grants offensive security capabilities to an agent, including prompt-injection and system-prompt extraction workflows. Install sources are mostly legitimate official registries, with moderate supply-chain risk from unpinned packages and an imprecise GitHub-only tool reference; no direct credential theft, covert exfiltration, or malicious installer behavior is shown.