internal-lab-validation

The skill is explicitly scoped to authorized private labs and includes meaningful target restrictions, read-only baseline limits, and reset/reporting steps. It nevertheless enables offensive security testing by an AI agent, and the absent runner prevents verification that the stated safeguards are enforced; review that code before use. No evidence of credential theft, exfiltration, malicious installation, or concealment is present.