audit-recon-links

SUSPICIOUS. The core Katana usage matches the stated recon purpose, but this is a high-risk offensive security skill that enables active crawling against arbitrary sites, authenticated session reuse, and optional no-sandbox headless browsing. Official Katana install paths are coherent and same-org, but the third-party secsi/getjs Docker example is a disproportionate extra dependency and the skill’s real-world scanning capability makes overall risk medium-high rather than benign.