tahr-map-attack-surface

SUSPICIOUS: the skill is internally coherent and does not show malware, credential harvesting, or supply-chain abuse, but it gives an AI agent concrete offensive security reconnaissance capability. Risk is driven by the pentest/recon purpose itself, partially mitigated by explicit authorization, read-only limits, and secret-handling restrictions.