binary-recon

This skill is instruction-only and shows no credential theft, exfiltration, or suspicious installer chain, so it is not malware. However, its stated purpose is to help an AI agent perform binary reconnaissance and vulnerability-oriented reverse engineering, which squarely falls into offensive/security-exploit capability and creates high misuse risk. The lack of provenance or guardrails adds some uncertainty, but the main issue is the skill’s offensive security scope, not hidden behavior.