cve-poc-generator

The skill is purpose-aligned and does not show clear credential theft or hidden exfiltration, but it materially enables offensive security work by having the agent generate CVE PoC code from external research sources. Treat as high-risk vulnerable/suspicious capability rather than confirmed malware.