rterm-discovery

SUSPICIOUS: the core discovery/CMDB capabilities mostly fit the stated purpose, but the skill has a very large operational footprint: broad network scanning, multi-protocol remote access, numerous credential types, centralized inventory collection, and autonomous trigger/remediation paths. No clear malicious exfiltration endpoint is shown, so this is not confirmed malware, but it is a high-risk infrastructure skill that exceeds a narrow read-only inventory role in practice.