supply-chain-attack-recon

SUSPICIOUS. The skill’s capabilities are coherent with its stated purpose, but that purpose is an offensive security recon workflow for supply-chain attack surfaces. It does not show clear malware or covert exfiltration by itself, yet it equips an AI agent to discover and potentially validate exploit paths and leaked credentials across public targets. Main risk is offensive-security enablement plus moderate supply-chain/install hygiene concerns from third-party tooling.