windows-ad

SUSPICIOUS. The skill’s capabilities are internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive Active Directory attack procedures. The mandatory confirmation gate helps, yet it is only a policy control. Security risk is high because the skill enables credential access, lateral-movement research, relay, and privilege-escalation workflows, and it references several external security tools without pinned install guidance. This is not confirmed malware or credential theft by itself, but it is a high-risk offensive-security skill with transitive-skill and supply-chain exposure.