recon-subdomain

SUSPICIOUS: the skill is internally coherent for subdomain reconnaissance, but it is an offensive-security AI skill and includes multi-tool external installs with unpinned mutable versions, including personal third-party repos. There is no clear credential harvesting or unrelated exfiltration, so this is not confirmed malware, but the capability set and supply-chain exposure make it high risk.