nmap

The skill is internally consistent with its stated purpose and uses the official Nmap command set without custom installers, proxies, or credential forwarding. However, it gives an AI agent explicit network-scanning and stealth-oriented offensive security capability with sudo-based execution, so overall risk is high from capability misuse even though there is no strong evidence of malware or data exfiltration.