network-credential-cracking

SUSPICIOUS: the skill is internally coherent for offensive security work, but it equips an AI agent to extract and crack credential material from sensitive files and captured auth data, then reuse recovered passwords for further access. The scanner's command-injection hits are benign markdown false positives; the main risk is the explicitly offensive credential-cracking capability and broad use of external security tools.