ad-pentest

The skill is internally consistent with its stated purpose as an AD penetration-testing guide, and I see no unrelated exfiltration or hidden credential routing. However, it equips an AI agent with offensive security capabilities and forwards AD credentials into multiple external tools, while using unpinned installs and some ambiguous package guidance; this makes it high security risk but not confirmed malware.