voip-pentesting

该技能与其宣称的 VoIP 渗透测试目的基本一致，未见明显凭据外传或恶意安装器，因此不像伪装型恶意技能；但它本质上为 AI Agent 提供了完整的进攻性电信攻击能力，含爆破、窃听、注入、DoS 与后渗透，对真实系统和通话具有高风险现实影响。总体应判为高风险的进攻性安全技能，而非确认恶意软件。

This provided fragment is not software implementation code; it is an attacker-oriented VoIP exploitation/abuse guide with explicit operational commands and configuration examples for causing unauthorized media interception/injection, spying/recording, and potential admin/dialplan command execution in Asterisk if misconfigured. There is no evidence of obfuscation or embedded executable payload in the fragment itself, but the inclusion of highly actionable intrusion guidance is a meaningful security-risk signal for a supply-chain package if shipped as part of a dependency. Additional context from the actual package contents is required to confirm whether it is merely documentation or part of a malicious distribution.