compliance-suite

SUSPICIOUS: the wrapper’s stated compliance purpose partially fits its review phases, but its actual footprint is broader and riskier than a normal audit skill. It enables autonomous offensive testing, remediation, and commits, and relies on several unverified sub-skills whose behavior is unknown. No direct malicious exfiltration or installer abuse is shown in this wrapper alone, but the combination of autonomous real-world actions, pentest capability, local file writes, and transitive trust makes it high security risk.