recon-subdomain-enum

SUSPICIOUS. The skill is internally consistent as a recon technique, but it gives an AI agent explicit offensive security capabilities to enumerate and probe external targets. There is little evidence of malware or credential theft, yet the real-world scanning function makes it a high-risk agent skill.