john

SUSPICIOUS: the pre-execution commands themselves are benign local checks, and the install paths are standard package-manager sources, so this is not malware. However, the skill’s core purpose is to give an AI agent offensive password-cracking capability against shadow files and protected archives, which is high-risk and disproportionate for general agent use.