audit-security

SUSPICIOUS. The skill is internally coherent and mostly well-scoped for a repository security sweep, with no obvious exfiltration path or dubious installer. However, it is still a high-risk category because it equips an AI agent to perform security scanning and secret discovery against codebases and git history, which can expose sensitive material and be misused outside the intended repo scope.