penetration-testing-with-strix

SUSPICIOUS. The skill is coherent with its stated purpose, and the installer/API endpoints appear same-org and official, but it grants an AI agent high-risk offensive security capabilities, uses a curl|bash installer, and can send sensitive scan context to Strix cloud. This is not confirmed malware, but it is a high-risk pentesting skill that should only be used with strict authorization and trust in the vendor.