gau

SUSPICIOUS rather than malicious. The skill is internally consistent and does not show credential theft, covert behavior, or suspicious install chains, but it equips an AI agent with offensive reconnaissance workflows and chaining into active security tools. Risk comes from enabling security testing actions, not from deceptive data flow or malware-like behavior.