Security audit
Security checks across malware telemetry and agentic risk
The skill appears to be a security-scanner wrapper, but it asks for broader local authority than its documented workflow needs and under-explains what data is sent to the external scanner service.
Review this skill before installing. It is not clearly malicious, but it grants local read/exec/write capability for a workflow that mostly appears to call an external API. Avoid using confidential internal skill names or callback URLs unless you are comfortable sending them to the scanner service, and prefer a version that removes or scopes write access and documents external data handling.
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
