cracking-passwords

SUSPICIOUS/High-risk skill overall: the documented installs and links are mostly coherent and low-risk, but the skill’s core function is to equip an AI agent with offensive password-cracking, spraying, brute-force, and pass-the-hash procedures against real systems. There is no obvious credential exfiltration or deceptive routing, so this is not confirmed malware; however, it is a high-risk offensive-security capability and unsafe to enable for general-purpose agents.

The file is reference documentation, not malware or executable package logic. It contains explicit instructions for targeted wordlist generation and credential spraying against SMB, Kerberos, and RDP, which could enable unauthorized access and account lockouts. No evidence of embedded malware, credential theft by the document itself, obfuscation, persistence, or covert exfiltration is present.