amass

SUSPICIOUS: The skill is internally coherent for Amass usage and mostly uses official same-project distribution paths, so it is not a credential-harvesting or overtly malicious skill. However, it is a high-risk offensive security skill that enables active reconnaissance against external targets, and its install guidance has moderate supply-chain hygiene issues (unpinned/stale sources, no artifact verification).