security-auditor

This skill is purpose-aligned but high risk because its purpose is offensive-capable security testing by an AI agent. It does not show clear credential theft, exfiltration, or malicious payload delivery, so it is not confirmed malware; however, the pentest/exploitation scope and autonomous scanner execution make it a suspicious, high-risk skill.