pentest-helper

SUSPICIOUS: the skill’s actual footprint is mostly instruction-only, but its stated purpose is to give an AI agent offensive security capabilities. There is no credential theft, download-execute path, or exfiltration in the provided content, so this is not confirmed malware; the main concerns are high-risk pentesting enablement and weak provenance due to third-party hosting with mismatched authorship.