pentest-report

SUSPICIOUS. The skill is internally aligned with its stated pentest-report purpose and shows no hidden exfiltration, credential harvesting, or malicious installer behavior. However, it gives an AI agent explicit security-audit/offensive testing capability with broad shell-based code scanning and dependency-audit execution, which is inherently high-risk for an agent skill even when transparently documented.