asset-discovery

SUSPICIOUS: internally coherent recon skill with mostly legitimate tool references, but it equips an AI agent with offensive network scanning and fingerprinting capabilities. Supply-chain risk is modest; overall risk is driven by the skill’s security-testing function, not by malware indicators or credential theft.