infra-pentesting

HIGH risk. The skill is internally consistent as an offensive pentesting playbook, but it gives an AI agent autonomous exploit, credential-theft, persistence, pivoting, and exfiltration capabilities while discouraging additional approval checks. Official package-manager usage lowers pure supply-chain concern, yet the skill remains dangerous because its core purpose is active offensive security against live infrastructure.