security-drill

SUSPICIOUS. The skill's purpose and capabilities are internally consistent for a red-team drill, but it is an offensive-security skill for AI agents and the published contents do not include the referenced execution script, so the implementation and containment claims cannot be verified. No clear credential harvesting or external exfiltration is shown, but the combination of adversarial testing purpose, scheduled execution, and missing core code makes this a high security-risk skill rather than confirmed malware.