web-pentest

SUSPICIOUS/HIGH-RISK capability but not malware. The skill is internally coherent for web pentesting and includes meaningful authorization and scope guardrails, with no third-party credential relay or suspicious installer. However, it equips an AI agent to perform active reconnaissance and exploitation against live systems, which is inherently high risk even when framed for authorized use.