WordPress Penetration Testing

SUSPICIOUS/HIGH-RISK skill, not confirmed malware. Its capabilities are internally consistent with its stated purpose, and the named tools are official/publicly sourced, but the purpose itself is offensive: it enables enumeration, credential attacks, exploitation, shell upload, and evasion. No hidden third-party exfiltration path is evident, yet the skill materially increases misuse risk and includes disabled TLS examples and credential-forwarding to external tools/targets.