ffuf

SUSPICIOUS. The skill is coherent and uses official upstream install sources, so there is little sign of credential theft or deceptive data routing. However, it is explicitly an offensive security skill for automated web fuzzing and reconnaissance, which makes it high risk despite acceptable supply-chain provenance.