zeroize-audit

SUSPICIOUS. The skill’s capabilities are broadly aligned with a zeroization audit workflow, and there is no clear credential theft or exfiltration path. However, it is a high-impact security skill with Bash/Write/Task privileges, PoC generation and execution, and exposure to indirect prompt injection from untrusted codebases, so its operational risk is medium even though its intent appears legitimate.