webapp-pentesting

SUSPICIOUS: the skill's offensive webapp-pentest actions mostly match its stated purpose, so this is not confirmed malware, but it is a high-risk AI exploit skill. It removes normal approval friction, promotes stealth/evasion, enables credential extraction and cracking, and extends trust to local scripts and other skills, making its operational footprint dangerous and disproportionate for routine agent use.