pentest-r1-autonomous-penetration-testing

SUSPICIOUS. The skill’s offensive-security purpose matches its capabilities, so this is not deceptive, but it enables autonomous pentesting and relies on third-party code paths not clearly tied to the publisher. Main risk is supply-chain and execution trust rather than confirmed malware or credential theft.