recon-hvac

SUSPICIOUS: the skill is internally coherent as an HVAC-focused recon guide, but its actual purpose is offensive security enumeration of third-party websites. It uses standard tools and no suspicious installer, yet it explicitly guides collection of exposed customer data and vulnerability discovery, with TLS verification disabled during scans. High security risk, but not confirmed malware.