building-threat-actor-profile-from-osint

The skill is purpose-consistent and uses mostly official APIs and standard packages, so it does not look malicious. However, it equips an AI agent with real reconnaissance/threat-intelligence capability, runs a local security scanning tool, and processes untrusted external content with write/exec access, making it a moderate-to-high security-risk cybersecurity skill rather than a benign documentation-only guide.