reverse-engineer-binary

The skill has meaningful dual-use security-analysis capabilities and execute permissions, but its stated defensive purpose is supported by explicit authorization, sandboxing, and egress restrictions. No malicious payload, credential harvesting, remote installation chain, or exfiltration flow is present. Treat as elevated capability risk, not confirmed malware.