pentesting-checklist-usage

SUSPICIOUS. The skill is internally consistent and does not show credential harvesting, hidden exfiltration, or malicious installers, but it is an offensive-security skill for AI agents and therefore high-risk in use. Overall footprint is coherent with its purpose; main concerns are offensive capability and ordinary npm supply-chain exposure, not malware indicators.