tplmap

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive SSTI exploitation, RCE, shell, and file-transfer capabilities. Supply-chain trust is only moderate due to direct install from a personal, stale GitHub repo and metadata inconsistencies, but the main concern is the high-risk offensive capability rather than confirmed malware or credential theft.