soia-safe-audit-fix-codebase

SUSPICIOUS: the skill's stated audit-and-fix purpose broadly matches its capabilities, and its approval gate meaningfully reduces direct misuse. The main risk is install trust: remote skill installation with wildcard agent scope plus transitive dependency loading from an only partly verifiable publisher. I do not see clear credential harvesting, hidden exfiltration, or purpose-incompatible behavior in the skill text itself.