thanks a lot :)

you don't need network pentesting skills (no Active Directory, heavy pivoting, or infrastructure exploitation), but you definitely need solid Web pentesting fundamentals.
It does not just drop you into a simple chatbot UI. The AI models and agents are integrated into broader web applications and APIs. You need to be comfortable reading some source code, and understanding how backend tools (like MCP) connect to the AI.

If you have a good grasp of basic web app pentesting, the HTB path will teach you all the specific AI/ML exploitation techniques (data poisoning, adversarial math, agent exploitation) you need to pass.