awesome-pentest

SUSPICIOUS. The skill is internally coherent for an authorized pentest workflow and includes meaningful scoping/ethics limits, but it still grants an AI agent offensive security capability against live systems, which is high risk by nature. The flagged prompt-injection issue is a false positive; the main concern is autonomous security-testing capability and transitive reliance on sibling skills/tools, not malware or covert exfiltration.