security-audit

The skill's footprint is coherent with its stated purpose. It focuses on secure, user-approved security auditing using trusted, self-contained tooling and proper output handling. There are no evident discrepancies between claimed capabilities and data/flow patterns. The design minimizes risk by avoiding automatic installations, prohibiting reading or leaking secrets in outputs, and requiring explicit user consent for fixes. Overall, the risk posture is benign with minor residual concerns around ensuring access controls to .security outputs in real projects, and ensuring that all optional tools remain up-to-date and sourced from trusted registries.