shodan-reconnaissance

SUSPICIOUS: the skill is internally consistent and uses official Shodan tooling/endpoints, so it does not look malicious or like credential harvesting. However, it explicitly equips an AI agent for penetration-testing reconnaissance and active scanning of external targets, which is a high-risk offensive-security capability even with authorization warnings and a confirmation gate.