attack-surface-mapping

SUSPICIOUS: the skill is internally coherent as an authorized attack-surface mapping guide, but it equips an AI agent with offensive security reconnaissance behavior and follow-on exploitation workflow references. No malware indicators, covert exfiltration, or supply-chain abuse are present in the provided files, yet the offensive-agent capability makes the skill high security risk.