performing-agentless-vulnerability-scanning

SUSPICIOUS: The skill is broadly aligned with its stated purpose of agentless vulnerability scanning, and its toolchain/protocols are legitimate. Risk is elevated because it gives an AI agent offensive security scanning capability and includes weakened trust controls for WinRM TLS and SSH host key verification, but there is no evidence of credential harvesting, covert exfiltration, or untrusted installer behavior.