gandalf-llm-pentester

SUSPICIOUS. The skill’s behavior matches its stated purpose, but that purpose is an offensive AI pentesting toolkit that automates prompt-injection and secret-extraction attempts. Main risks are the offensive capability itself plus weak install trust from a personal repo, mutable Colab distribution, and unpinned dependencies; data flows to official Anthropic infrastructure and Lakera’s challenge endpoint rather than an obvious exfiltration host.