offensive-mitigations

The stated hardening-audit purpose is plausible, but the workflow grants broader vulnerability-assessment and offensive security capabilities. No evidence of credential theft, exfiltration, hidden execution, or malware appears. Classify as elevated security risk due to offensive testing capability and unverified referenced integrations, not as confirmed malware.