amass

SUSPICIOUS: The skill is internally coherent and not credential-harvesting, but it is a high-risk offensive security skill for an AI agent. Its capabilities match its stated OWASP recon purpose, install/data-flow trust is mostly normal, and the main concern is that it enables active scanning and attack-surface discovery rather than benign development workflow tasks.