subfinder

SUSPICIOUS. The skill is internally coherent and uses official install sources, so it does not look malicious or like credential harvesting. However, it is a security/reconnaissance skill for AI agents and explicitly expands into active scanning workflows, which makes it high-risk in use even though the documented data flows and credential needs are proportionate to its purpose.