iac-attack-surface

BENIGN for malware/exfiltration concerns: the flagged patterns are documentation context and the skill does not install software, execute remote code, or send data off-host. However, it is a high-risk capability skill because it equips an AI agent for offensive security review of IaC, so overall securityRisk remains elevated despite low malware likelihood.