scan

SUSPICIOUS: the stated purpose matches cloud compliance scanning, and no explicit exfiltration or malicious installer appears in the visible skill. Risk remains medium because execution depends on a configurable interpreter path and an unverifiable local shasta scanner codebase that likely handles broad cloud credentials and network access behind the scenes.