firmware-pentest

SUSPICIOUS: the skill is coherent with its stated firmware pentest purpose, but that purpose is intrinsically high-risk because it arms the agent with offensive security workflows, exploitation steps, and hardware/network probing. Data flows are mostly local or to official tool sources, with no clear credential-harvesting or exfiltration pattern, so this is not confirmed malware. Main concerns are offensive capability enablement and medium supply-chain risk from unpinned third-party tooling and sudo installers.