security-pen-testing

Purpose and capabilities are internally aligned: this is genuinely an offensive security skill. It is not overtly malicious and shows no deceptive installs or third-party credential routing, but it materially increases agent risk by enabling penetration testing, active probing, and exploit-style checks against real targets. Classify as high-risk vulnerable/offensive capability, not confirmed malware.