google-like-a-spy

This skill is not malware, but it gives an AI agent offensive OSINT/reconnaissance capabilities focused on finding exposed files, leaks, buckets, and admin surfaces. Its footprint is coherent with its stated purpose, yet that purpose itself is high risk for agent deployment; main concerns are security-tooling misuse and untrusted external content, not supply-chain or credential theft.