hunt-ntlm-info

SUSPICIOUS: the skill is internally coherent as an NTLM reconnaissance guide, but its purpose is explicitly offensive scanning and it includes unsafe TLS-disabled network code. There is no sign of credential harvesting, hidden exfiltration, or untrusted installer behavior, so this looks like a high-risk offensive skill rather than malware.