boofuzz

SUSPICIOUS. The skill is internally coherent and uses an official installation path, with no credential harvesting or odd data routing, so it is not malware-like. However, its stated purpose is to enable network protocol fuzzing by an AI agent, which is a high-risk offensive security capability and warrants elevated risk despite otherwise benign supply-chain signals.