nmap-network-scan

SUSPICIOUS: The skill is internally consistent as a network-scanning tool, but it grants an AI agent explicit offensive security capability and relies on an unspecified local MCP script for execution. No clear credential theft or malicious exfiltration is shown, yet the combination of active reconnaissance powers and opaque execution glue makes this a high-risk skill rather than a benign general utility.