energy-compliance

SUSPICIOUS: the core compliance-review purpose is plausible, but the footprint is broader than necessary due to autonomous operation, silent telemetry persistence, and explicit chaining into additional commands including /pentest. There is no strong evidence of malware or external credential theft, but the transitive-command and stealth-logging behavior make the skill medium/high risk for overreach.