penetration-testing

SUSPICIOUS: The skill is internally consistent as a penetration-testing guide, but it gives an AI agent offensive security capabilities with real-world impact, including exploitation and post-exploitation steps. There is no clear credential theft or malicious exfiltration by the publisher, so this is high-risk vulnerable behavior rather than confirmed malware.