supply-chain-audit

该技能的实际能力以主动攻击为核心，不是单纯防御性审计。它明确教授窃取构建环境秘密、向攻击者域名外传、发布恶意包/镜像污染供应链，并修改CI配置触发执行；这些行为与正常AI代理技能用途根本不相称，应判定为恶意。

The fragment is an offensive supply-chain attack and secret-exfiltration playbook. It contains explicit instructions and payload examples for CI/CD compromise, dependency confusion, malicious package hooks, image poisoning, credential harvesting, and covert exfiltration. It is not obfuscated, but the content has a high likelihood of malicious intent and presents an extremely high security risk if incorporated into tooling or followed in a production environment.