web-pentest

High-risk offensive security skill. Its capabilities align with its stated pentest purpose and there is no obvious credential theft or deceptive data exfiltration, but it enables an AI agent to perform live exploitation-oriented testing against external systems with only policy-based authorization checks. Treat as suspicious/high risk due to security-tooling and autonomous action potential, not confirmed malware.