security-pen-testing

SUSPICIOUS. The skill is internally consistent with its stated purpose, and install/data-flow trust is mostly normal for security tooling. However, its core purpose is to give an AI agent offensive security capabilities against external targets, so the overall risk is high even without clear credential theft or covert exfiltration.