cdk-escape

SUSPICIOUS. The skill is explicitly an offensive container-escape toolkit, and its most concerning issue is the documented download-and-execute of a black-box binary from attacker-controlled hosts instead of the official same-org release channel. Even though CDK itself has a legitimate upstream repo, this skill's actual installation and execution path is high risk and enables credential/control-plane abuse.