owasp-security-code-review

SUSPICIOUS. The skill is coherent and uses official OWASP reference sources, with no install-trust or credential-routing problems. However, it equips an AI agent to perform security review and generate PoC scripts against untrusted code, which is a high-risk offensive capability and creates indirect prompt-injection exposure despite otherwise proportionate scope.