auditing-code-for-vulnerabilities

The skill is internally consistent and not a credential-stealing or exfiltration artifact, but it materially increases offensive capability by teaching and operationalizing vulnerability discovery against target codebases. Risk is driven by the exploit-research purpose and by processing untrusted code with command execution available, not by malicious installs or suspicious data flows.