recon

SUSPICIOUS: the skill is purpose-aligned and not overtly malicious, but it gives an AI agent offensive reconnaissance capabilities and interpolates unquoted user input into shell commands. The pre-execution directive is benign, and there is no credential harvesting or third-party proxying, but the active pentest workflow and command-execution surface make overall risk high.