recon-for-sec

The skill is internally consistent as a reconnaissance router and does not itself exfiltrate data, install tools, or request credentials. Its main risk is that it enables offensive security workflows by directing the agent to additional attack-oriented skills, so it should be treated as high-risk capability enablement rather than confirmed malware.