arjun

SUSPICIOUS: the install source is coherent and likely official, but the skill’s purpose is to equip an AI agent with offensive web reconnaissance/fuzzing capabilities against arbitrary endpoints, including authenticated targets. The main risk is not malware or exfiltration to a hidden service; it is enabling autonomous security scanning and credential-bearing requests through a third-party CLI.