dast-scanning

SUSPICIOUS. The skill is internally coherent for DAST and uses mostly official tooling, so it is not malware-like or credential-harvesting by design. However, it gives an AI agent high-impact offensive scanning capability against live targets, so overall security risk is elevated despite good safety language and mostly trustworthy install paths.