firmware-analyst

SUSPICIOUS. The skill is largely coherent for firmware security analysis, but it grants an AI agent high-risk offensive security capability and includes a weak firmware acquisition example over plain HTTP. I see no credential harvesting, stealth, or clear exfiltration, so this is not malware, but it is a high-risk security skill.