lab

SUSPICIOUS: the skill is internally consistent as a local vulnerable-lab manager, but it explicitly enables AI-agent pentesting practice and triggers unseen Makefile/Compose execution plus container image pulls whose provenance cannot be verified from the provided text. No direct credential harvesting or exfiltration is evident, yet the offensive-security purpose and opaque downstream execution make it medium/high risk rather than benign.