pentagi

SUSPICIOUS: the skill is internally consistent with its stated purpose as an autonomous pentesting platform and uses same-org official sources, so it does not show credential harvesting or deceptive exfiltration. However, the purpose itself is high risk: it enables AI-driven offensive security actions, processes untrusted external content, mounts Docker control surfaces, and can send target details to third-party LLM/search providers.