attack-surface

SUSPICIOUS: the skill is internally consistent for attack-surface mapping, but it equips an AI agent for offensive security reconnaissance and recommends a second unverified skill. There is no direct credential theft, exfiltration path, or malicious installer in the provided content, so this is high-risk security tooling rather than confirmed malware.