onvifscan

The skill is internally consistent with its stated purpose, but that purpose is an offensive security function: scanning ONVIF devices and brute-forcing credentials. There is little evidence of hidden exfiltration or deceptive install behavior, yet the capability itself is high risk for an AI agent because it enables active attacks on networked devices. Classification: SUSPICIOUS due to offensive-security and autonomous real-world action risk, not confirmed malware.