initial-access

High-risk offensive security skill. It is internally consistent with its stated purpose, but that purpose is to enable initial-access attacks, phishing, credential abuse, and exploit delivery. No strong signs of hidden malware or deceptive credential harvesting from the user, yet the operational attack guidance makes the skill dangerous.