penetration-testing-with-strix

SUSPICIOUS. The skill is internally consistent with its stated purpose, and the installer appears to be official same-org infrastructure rather than a disguised credential stealer. However, this is a high-risk AI agent skill because its intended function is autonomous penetration testing and exploitation against live targets, with optional source uploads to Strix cloud and writable local sandbox access; it should be treated as dangerous offensive capability, though not confirmed malware.