cracking-technique

SUSPICIOUS. The static findings are mostly documentation false positives, and I see no confirmed malware or hidden exfiltration. However, the skill’s true purpose is to equip an AI agent with password-cracking and related offensive methodology, including escalation toward online authentication attacks via linked Hydra tooling; that makes it a high-risk offensive-security skill even when framed as authorized auditing.

High-confidence identification of an offensive, iterative password-cracking workflow. The fragment provides direct, actionable instructions to recover plaintext credentials from password hashes using Hashcat, including use of OSINT/leak-derived wordlists, potfile-based result disclosure, and a closed-loop refinement process that generates and reuses derived candidate material. While it contains no malware code or network exfiltration within the snippet, its purpose and operational behavior strongly enable unauthorized access/credential theft.