find-hidden-subdomains

The skill is internally consistent with its stated purpose and does not show credential theft or deceptive data routing, but its purpose is offensive reconnaissance. Because it equips an AI agent to enumerate targets, generate DNS traffic, and pivot toward active probing, it should be treated as a high-risk security skill rather than malware.