nmap

SUSPICIOUS: internally coherent as an Nmap reference, with low install-trust concern and no credential harvesting, but the skill’s core function is to equip an AI agent with offensive scanning, evasion, brute-force, and vuln-script capabilities. This makes it high security risk despite low evidence of malware.