offensive-dependency-confusion

SUSPICIOUS/HIGH-RISK. The skill is internally coherent as an offensive security methodology, but that purpose itself is dangerous for an AI agent: it teaches targeted supply-chain compromise, routes execution beacons to known exfiltration endpoints, and instructs autonomous public-registry publishing. Not confirmed malware by itself, but it materially enables real attacks and should be treated as a high-risk offensive skill.