fuzz

SUSPICIOUS: the install sources for ffuf are mostly legitimate and consistent with the stated purpose, but the skill’s purpose is to equip an AI agent with offensive web fuzzing capability, including authenticated probing of targets. There is no clear credential exfiltration or malicious installer behavior, but the capability itself is high-risk and broader than a normal benign productivity skill.