linpeas

SUSPICIOUS. The installer provenance appears consistent with the official LinPEAS project, so the flagged pipe-to-shell is a supply-chain hygiene issue rather than confirmed malware. However, the skill’s actual purpose is offensive privilege-escalation assessment: it enumerates credentials, identifies exploit paths, and guides post-compromise persistence. That offensive capability is disproportionate for general agent use and makes the overall skill high risk even without obvious exfiltration or obfuscation.