attack-surface-recon

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is offensive security reconnaissance for an AI agent. Main risk is proportionality and real-world scanning capability rather than clear malware or credential theft; install/data-flow risk is moderate because referenced tools/services are mostly legitimate and no direct download-execute path is included.