snmp-pentesting

MALICIOUS：该技能的 stated purpose 本身就是为 AI 代理提供进攻性 SNMP 渗透与利用能力，包含爆破、命令执行、反弹 shell、配置窃取与外传。另有高风险第三方 GitHub 工具安装，并将社区字符串转交给该未验证工具，触发凭据转发与供应链风险下限。

This fragment is highly indicative of malicious exploitation and post-exploitation guidance. It demonstrates (1) SNMP-based configuration exfiltration (copy running-config to attacker-controlled TFTP), and (2) NET-SNMP-EXTEND-MIB command execution with an embedded reverse-shell payload triggered via SNMP read behavior. If present in any dependency or repository, it represents an extreme supply-chain security concern. No benign or defensive use case is demonstrated in the provided content.