feroxbuster

SUSPICIOUS: the skill is internally coherent for pentesting, but it equips an AI agent with active offensive web-scanning capability and can send auth tokens through a local external CLI. No clear malicious or exfiltration behavior is shown, and supply-chain risk is moderate rather than severe when feroxbuster is obtained from official sources.