trufflehog

SUSPICIOUS: the skill is internally coherent and uses an official same-org tool, but it gives an AI agent high-risk offensive secret-scanning capability across local repos, filesystems, history, and S3. Main concern is powerful security scanning and exposure of sensitive material, not malware or deceptive data routing.