wooyun-legacy

SUSPICIOUS: The skill is internally consistent and does not show credential theft, exfiltration, installers, or hidden execution. However, it is an offensive security skill that teaches an AI agent how to perform penetration testing and vulnerability research, which is high-risk by category even though the content appears documentation-only and proportionate to its stated purpose.

The visible content is a dual-use IoT and service-security assessment guide with an active network scanner. It contains intrusive probing, default-credential testing, and potentially sensitive-data retrieval examples that should be restricted to authorized assessments. The Python code has security and safety concerns, notably disabled TLS verification and lack of authorization or rate-limit controls, but it shows no clear malware behavior, covert data theft, persistence, or sabotage.

The fragment is a readable offensive-security and defensive-reference document, not executable malicious code. It contains highly dangerous example payloads and persistence techniques, but no evidence here of automatic execution, data theft, network exfiltration, or package-installation behavior. It should be handled as sensitive dual-use security content and must not be executed against unauthorized systems.