reverse-engineer

SUSPICIOUS. The skill’s purpose and capabilities are aligned, but the purpose itself is high-risk: it equips an AI agent for reverse engineering, pentesting, exploit-adjacent tasks, and malware work. There is no clear credential theft or covert exfiltration in the provided content, and the consent/scope gates are a meaningful mitigating factor. The main concerns are offensive-security enablement and external tool bootstrap from mixed-trust sources, especially the personal GitHub upstream and broad installer surface.

This is a Markdown API-testing guide, not executable code, and it contains no demonstrated malware, credential theft, or data exfiltration. Its prompt-like instructions request local file/tool actions and describe intrusive testing, including brute-force and DoS techniques; carrying them out without verified authorization and safeguards could disrupt or probe systems. No target domain, URL, IP, credential, or environment variable is specified. Overall severity is moderate due to the potentially disruptive operational guidance, not malicious behavior in the fragment itself.