tradecraft-attack-scenarios

SUSPICIOUS. The skill is internally consistent and not credential-harvesting, but it equips an AI agent with offensive security planning/orchestration capabilities. Risk comes from the pentest attack-scenario purpose itself, not from hidden installs, exfiltration, or disproportionate access.