js-analysis

SUSPICIOUS: the skill is internally coherent as a JS reconnaissance guide, but its stated purpose is offensive security against live targets and it equips an AI agent to discover secrets, hidden routes, and follow-on attack paths. No confirmed malware or covert exfiltration is present, but the exploit-focused capability set and mixed-trust tool installation make this a high-risk skill.