crypto-analysis

This is attack and security-testing code for exploiting weakly configured block-cipher services, not code that independently performs malware actions. Its use against an unowned or unauthorized target could enable plaintext recovery or ciphertext manipulation. The referenced npm CLI cannot be assessed from this fragment.

SUSPICIOUS. The skill is internally coherent for cryptanalysis, but its purpose is explicitly offensive: it equips an AI agent to break ciphers and probe padding oracles against targets. The install sources look legitimate and there is no clear credential theft or covert exfiltration, so this is not malware; however, the skill meaningfully increases operational security risk through offensive-security guidance, unpinned third-party tools, and remote-target attack workflows.