ctf-flag-verification

SUSPICIOUS: the skill is internally coherent as a CTF flag-validation guide and shows low supply-chain/exfiltration risk, but it also teaches and operationalizes offensive techniques for an AI agent (SQLi, RCE, LFI, sqlmap). That makes it high-risk as an agent skill even without evidence of malware or credential theft.