scanning-tools

SUSPICIOUS. The skill is internally coherent as an offensive security scanning guide, but its actual footprint is high risk because it equips an AI agent to perform network/web/wireless/cloud security scans and exploit-adjacent validation against real targets. Install sources are mostly legitimate yet loosely pinned, and some tools require forwarding sensitive credentials. No clear credential-harvesting or covert exfiltration is shown, so this is not confirmed malware, but it is a high-risk security skill.