smtp-penetration-testing

SUSPICIOUS. The skill is internally consistent as an SMTP penetration-testing skill, and its package installs and data flows match that purpose. However, it equips an AI agent with offensive security capabilities including enumeration, relay testing, and brute-force authentication, which creates high real-world abuse potential even with the stated authorization gate. No hidden exfiltration, stealth, or deceptive installer behavior was found.