penetration-tester

SUSPICIOUS: the skill is internally coherent and does not show malware, exfiltration, or installer abuse, but it grants an AI agent explicit offensive-security review capability. That makes it high-risk as an agent skill despite limited permissions and otherwise clean data flows.