01-recon-osint

SUSPICIOUS. The skill is internally coherent for a recon/OSINT purpose and uses mostly standard, official install channels, so it does not look like credential-harvesting malware. However, it is a high-risk offensive security skill for an AI agent because it directs active reconnaissance, scanning, probing, and follow-on security workflow actions against external targets.

The code is a website reconnaissance and technology fingerprinting utility. It does not show clear malware, credential theft, persistence, destructive behavior, or covert exfiltration. However, it performs unrestricted user-directed network requests, follows redirects, and disables TLS verification, creating moderate security risk in environments where URL input is untrusted or network access is privileged. Certificate verification should remain enabled and URL destinations should be validated or restricted. The provided fragment also appears incomplete and would fail to parse as written.