engineering-skills

SUSPICIOUS: The skill’s stated purpose is offensive security testing, and it gives an agent actionable active-scanning and penetration-testing methods. Authorization and scope warnings, along with the absence of suspicious credential routing or custom download-execute chains, reduce concern about malicious intent but do not remove the high operational risk. Verify target authorization and review the referenced local scripts before use.

SUSPICIOUS: This is an offensive-security skill with actionable guidance for stealth, persistence, credential access, and exfiltration. It claims authorized use but provides no technical scope enforcement or per-action approval safeguards. No evidence of credential harvesting or malicious data exfiltration by the skill itself was supplied.

A finalidade é coerente com as operações e credenciais solicitadas, mas a recomendação de instalar `@anthropic/gws` não corresponde ao pacote documentado pelo projeto identificado e merece verificação antes de uso com credenciais. O caminho Cargo também não teve sua procedência confirmada. Não há evidência suficiente de intenção maliciosa ou exfiltração; classificação geral: suspeito, com risco de cadeia de suprimentos.