upload-insecure-files

SUSPICIOUS. This skill is internally consistent as an upload-exploitation playbook, but its actual purpose is to give an AI agent offensive security capabilities against target systems, including upload-to-RCE chains and linked exploit pivots. No direct credential theft, hidden execution, or malicious installer is present, so it is not confirmed malware, but it is a high-risk offensive skill.