Initial incident intake & scoping

Security scan

AI scan Medium

VirusTotal scan Unknown

What looks risky

Privacy exfiltration 5.8

skill.md

mentions sensitive credential material

"First-hour intake checklist + questions that produce an actionable scope and evidence plan."