security-pen-testing

This skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive security capabilities. Install sources are mostly official and proportionate, with no clear credential-harvesting or covert third-party routing, so it is not confirmed malware; however, it materially increases risk because it enables scanning, exploit-style probing, token handling, and sensitive evidence collection against live systems.