hack

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive security capability. There is no clear credential-harvesting or covert exfiltration in the skill text, and the static prompt-injection findings are weak, but the overall capability set is high risk by design for an agent environment. Distribution evidence adds moderate supply-chain concern without proving malicious intent.