scanning-api-security

SUSPICIOUS. The skill’s stated purpose matches its capabilities, outputs stay local, and the cited tools are largely official and plausibly relevant. However, it is an AI-agent security scanning skill that can direct offensive testing activity, so it carries elevated inherent risk despite lacking clear malware signals, credential harvesting, hidden execution, or suspicious data exfiltration paths in the provided text.