agent-security-engineer

SUSPICIOUS: the skill's stated purpose is security engineering, but its actual footprint grants an AI agent offensive security capability through nmap and metasploit plus unrestricted shell/file access. Provenance for the named tools appears broadly legitimate, so this is not confirmed malware, but the capability set is high-risk and disproportionate for a general DevSecOps/compliance helper.