vulnerability-writeup

SUSPICIOUS. The skill is internally coherent for vulnerability reporting, with no obvious malicious install path, credential harvesting, or third-party data routing. However, it materially equips the agent to perform exploitability analysis, build PoCs, run commands, and optionally access labs over SSH/VM, which makes it high-risk offensive-security functionality despite being framed as disclosure assistance.