memcache-pentesting

该技能的安装来源基本正常，但其核心用途是让 AI Agent 执行进攻性安全操作：扫描 Memcached、提取缓存数据、评估放大攻击面并指导缓存投毒。这与普通开发/运维技能不成比例，且可能导致未授权数据访问和对真实目标的主动攻击。结论：SUSPICIOUS，高风险的进攻性安全技能，而非确认恶意窃密器。

The reviewed artifact is a high-risk offensive Memcached exploitation guide. While it does not constitute executable malware code within a dependency, it meaningfully enables malicious actions: (1) enumeration and extraction of cached keys/values, (2) session/cache poisoning via crafted 'set' writes, and (3) potential UDP reflection/amplification abuse. If included in a repository or software supply chain as documentation/material, it should be treated as a serious security policy and misuse risk.