03-exploit-development

SUSPICIOUS: The skill is internally coherent for exploit-development purposes and does not show credential theft or hidden exfiltration, but its primary function is to equip the agent with offensive security capabilities. Supply-chain risk is low-to-moderate and mostly limited to normal unpinned pip installs; overall risk is high because the skill belongs to the offensive exploit/tooling category and relies on policy-only authorization gating.

The fragment is intended as an offensive security payload generator and contains explicit reverse-shell code generation, including command execution behavior if the generated payload is deployed. It does not itself establish a connection or execute the generated shell, and no credential theft or covert exfiltration is shown. The supplied fragment is syntactically incomplete and likely nonfunctional as-is. Treat it as high-risk security tooling and do not use generated payloads outside authorized testing.