performing-physical-intrusion-assessment

SUSPICIOUS/HIGH RISK. The skill’s offensive scope is internally consistent with its stated purpose, but that purpose is itself a high-risk AI-agent capability: it operationalizes physical intrusion, credential capture, rogue device deployment, and remote footholds. The explicit use of an unverifiable C2-hosted PowerShell stager materially elevates supply-chain risk, and the skill enables autonomous real-world actions with serious physical and network impact.

No malware or executable supply-chain behavior is present because the supplied material contains no code. However, it documents actionable physical intrusion and credential-cloning techniques that could enable unauthorized access or data compromise if used outside a formally authorized assessment. The security concern relates to the operational content, not to package malware.