php-route-mapper

SUSPICIOUS. The skill is internally coherent and does not show malicious install paths, credential harvesting, or external exfiltration, but it equips an AI agent with offensive security reconnaissance capability by exhaustively mapping routes and generating test-ready HTTP requests. Risk is driven by dual-use security tooling rather than deceptive behavior.