performing-hash-cracking-with-hashcat

SUSPICIOUS. The skill is internally consistent and not obviously a credential-harvesting lure, but it gives an AI agent offensive hash-cracking capability against sensitive credential material. Install trust appears relatively benign; the main risk is the skill’s penetration-testing functionality itself.