cms-detection

The skill is internally consistent for CMS fingerprinting, but its stated purpose is overtly offensive recon on live targets and it equips an AI agent to prepare follow-on exploitation. No credential harvesting or suspicious third-party routing is present, yet the offensive security capability and TLS-verification bypass make it a high-risk vulnerable skill rather than confirmed malware.