ctf-sandbox

SUSPICIOUS. The stated purpose as a CTF router broadly matches the handoff behavior, and the network-gating language is safety-oriented. However, the skill still executes an unverifiable local PowerShell script immediately and delegates to a sidecar skill tree, so trust depends on unreviewed repository-local content rather than a verified release path. No direct evidence of credential theft or malicious exfiltration appears in this snippet.