shannon-ai-pentester

SUSPICIOUS/HIGH-RISK skill, not confirmed malware. The install path appears same-project and broadly legitimate, and the scanner’s .docker findings are benign documentation artifacts, but the skill’s core function is autonomous offensive security: reading source code, using credentials, and executing live exploits against running targets. That makes the security risk high by scope and real-world action, even though publisher/tool alignment is mostly coherent.