scada-hikvision-isapi

SUSPICIOUS: the skill is internally consistent as a Hikvision recon tool, but its actual purpose is offensive SCADA/IoT enumeration and initial access testing. No strong supply-chain or exfiltration signs appear, yet the exploit-oriented scope, default-password checks, SSRF probing, and disabled TLS verification make it a high-risk agent capability.