port-scan

SUSPICIOUS: the skill is internally consistent and uses trusted install sources, but it gives an AI agent active network reconnaissance capability with optional root-only probes. There is no clear credential theft or exfiltration, so this is not malware, but it is a high-risk offensive security skill.