nuclei-scan

SUSPICIOUS. The skill is internally consistent and uses official ProjectDiscovery/Go distribution paths, so it does not look like credential theft or deceptive malware. However, it gives an AI agent active offensive security scanning capability with mutable upstream installs/templates and real network impact, which makes the overall skill high risk despite coherent purpose alignment.