pentest-business-logic

SUSPICIOUS: the skill is internally consistent as a business-logic pentesting skill, but that purpose itself gives an AI agent offensive security capability with potentially impactful actions against web apps, uploads, and payment flows. No strong malware or credential-theft indicators appear, and install/data-flow trust looks mostly normal; the main risk is empowering autonomous exploitation activity.