sccm-recon

SUSPICIOUS: the install path is benign and the command-injection findings are documentation artifacts, but the skill’s actual purpose is offensive SCCM reconnaissance to enable takeover/relay follow-on actions. That capability belongs to a red-team context, yet it still gives an AI agent high-risk security scanning and abuse-enablement instructions, so overall security risk is high even without evidence of malware or credential theft.