performing-authenticated-vulnerability-scan

SUSPICIOUS. The skill’s purpose matches its core capabilities, but it normalizes highly privileged authenticated access, includes an overbroad Linux sudo example, suggests Domain Admins in one Windows path, and weakens TLS with curl -k. There is no clear credential exfiltration to unrelated endpoints or malicious installer chain, but the privilege scope is somewhat disproportionate and risky for an AI agent security skill.

This is a dual-use authenticated network credential validation and inventory utility. It contains active authentication and limited remote command execution, but the provided fragment shows no clear malicious intent, credential exfiltration, persistence, sabotage, or obfuscation. It should only be used with explicit authorization. Host-key and TLS certificate verification should be enforced, and credential files and generated reports should be protected.