ctf-web-recon

SUSPICIOUS. The skill is internally coherent for CTF web recon and shows no credential theft, covert exfiltration, or malicious installer behavior, but it gives an AI agent offensive security reconnaissance capability and suggests using a third-party recon tool. Risk is driven by exploit-oriented purpose rather than deceptive data flows.