rubeus

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated purpose, but that purpose is an offensive Kerberos abuse toolkit for credential extraction, ticket forgery, and lateral movement. There is no direct evidence of hidden exfiltration or malware in the skill text, but enabling an AI agent to perform these actions creates substantial security risk.