masscan

SUSPICIOUS. The skill is internally coherent and not overtly malicious, but it gives an AI agent offensive network-scanning capability with real-world impact. There is no credential harvesting or suspicious third-party data routing, yet the recon/pentest function itself makes this a high-risk security skill.