python-security-tools

SUSPICIOUS. The skill’s capabilities align with its stated offensive-security purpose, but that purpose itself gives an AI agent exploit/scanning guidance with broad network effect. No hidden installer or credential-harvesting flow is shown, yet the built-in `verify=False` pattern weakens transport security and makes captured or modified traffic more plausible. Main risk is offensive security enablement plus disabled TLS, not confirmed malware.