payloads-scm-exposure

The skill is purpose-consistent as an authorized penetration-testing reference, but it enables real SCM discovery and source-code extraction. No credential harvesting, stealth, remote payload execution, or unrelated exfiltration path is present. Classify as high security risk due to offensive security capability, not confirmed malware.