pentest

SUSPICIOUS. The skill is internally consistent as a pentest skill and shows no external installer or credential-exfiltration path, but it gives an AI agent high-risk offensive security capabilities, runs in autonomous mode by default, and performs silent local telemetry writes unrelated to core analysis. This is better classified as a high-risk security skill rather than malware.