post-patch-validation

SUSPICIOUS: the skill is internally coherent and not overtly malicious, but it equips an AI agent to perform exploit-driven security validation and execute untrusted local code with broad local effects. Supply-chain trust is mostly acceptable, and data flows appear local-only, yet the offensive testing capability plus Bash/Workflow execution makes it high risk.