detecting-rootkit-activity

SUSPICIOUS. The skill is internally consistent as a rootkit-detection playbook and shows no clear credential theft or exfiltration path, but it gives an AI agent high-risk security-tooling capability and relies on multiple external forensic tools without pinned, verified install guidance. This is best classified as a high-risk cybersecurity skill rather than malware.