exchange-owa-attack

SUSPICIOUS: the skill’s footprint is coherent with its stated Exchange attack purpose, but that purpose is itself an offensive security workflow for an AI agent. Main risks are active password-spray capability, remote reconnaissance against real targets, and disabled TLS verification; there is no clear evidence of credential harvesting to third-party infrastructure or outright malware.