tools-ffuf

SUSPICIOUS: the skill is internally coherent and not malware-like, but it gives an AI agent offensive security scanning capability with optional credentialed requests. No obvious exfiltration or malicious installer behavior appears, yet the operational risk is high because it enables active reconnaissance against web targets.