active-directory-certificate-services

SUSPICIOUS. The skill is internally coherent as an AD CS attack guide, and the cited tools appear to come from legitimate projects, but its actual purpose is to equip an AI agent with offensive security and privilege-escalation capability. The main risk is not hidden malware; it is deliberate enablement of exploitation, credential use in third-party tooling, and transitive loading of more attack skills.