web-pentest

The skill is purpose-aligned and does not show credential theft, stealth, or off-purpose data routing. However, it equips an AI agent to perform live penetration testing and active security probing, which is a high-risk capability even with stated authorization boundaries. Verdict: SUSPICIOUS due to offensive-security scope, not because of confirmed malware or exfiltration.