web-app-penetration-testing

SUSPICIOUS: the skill is purpose-aligned as a pentesting workflow, but it is inherently high risk because it equips an AI agent to run active exploits against live systems and forward credentials into external tooling. The Strix install path appears same-org and documented, so this is not strong malware evidence, but the offensive capability, credential handling, and optional cloud data flow make it a high-risk vulnerable skill.