hackerone

The skill is purpose-aligned but high risk: it equips an AI agent to conduct offensive security testing, rerun/repair exploit PoCs, and scale bug bounty operations across assets. I found no clear credential theft, third-party proxying, or malicious installer behavior in the provided text, so this is better classified as a dangerous offensive-security skill than confirmed malware.