security-auditor

SUSPICIOUS. The core purpose and capabilities mostly align with a legitimate security-audit skill, and there is no external installer or obvious credential-harvesting path. However, the unprovided local scripts and especially the opaque auto/background hooks make post-audit data flows unverifiable and broaden scope beyond a straightforward read-only review.