penetration-testing

SUSPICIOUS. The skill is internally consistent with its stated penetration-testing purpose and does not show credential theft, hidden exfiltration, or malicious installers, but it equips the agent with offensive security testing capabilities against live targets. Main risk is the inherent danger of enabling AI-driven pentesting, not covert malware behavior.