pentest

SUSPICIOUS: the skill's offensive scanning behavior matches its stated pentest purpose, but it still grants an AI agent high-risk security-testing capabilities and uses a questionable install path for Clearwing. The main issues are autonomous real-world scanning and the unpinned external CLI provenance mismatch, not confirmed malware or clear credential theft.