feroxbuster

The skill is purpose-aligned and the flagged config-path access is benign documentation context, but it equips an AI agent with an offensive web enumeration capability against remote systems. No evidence of malware, covert exfiltration, or suspicious installer behavior appears in the skill text, yet the operational capability itself makes this a high-risk security tool for agent use.