security-auditor

SUSPICIOUS: The skill is internally consistent as a security-audit persona, but it explicitly equips an AI agent for offensive security work, including penetration testing, red teaming, and social engineering. There is no clear credential theft, exfiltration path, or malicious installer, so this is not confirmed malware; however, the operational capability is high risk for an AI agent and should be tightly scoped and approval-gated.