malware-analysis

The skill is purpose-aligned and uses mostly legitimate install sources, but it grants an AI agent powerful malware-analysis and sample-detonation workflows. The main risks are execution of untrusted binaries, arbitrary sandbox upload destinations, and reading an API key from a local secrets file. Overall this looks coherent for incident response, not malicious, but it should be treated as a high-risk security skill due to its execution and analysis footprint.