sast-pathtraversal

SUSPICIOUS. The skill is internally consistent and does not show malware traits, credential harvesting, exfiltration, installer risk, or hidden execution. However, it equips the agent with offensive security scanning behavior, so it should be treated as a high-risk-but-coherent security-audit skill rather than benign general-purpose automation.