subdomain-enum

This skill is coherent with its stated purpose, and its installs mostly point to official upstream tools, so it is not malware. It is still high risk because it gives an AI agent offensive reconnaissance capability, performs broad external network enumeration, and uses mutable install refs including an outdated amass command.