wafw00f

SUSPICIOUS: the skill is internally consistent and not a credential-harvesting or supply-chain lure, but it equips an AI agent with offensive security reconnaissance against arbitrary web targets. Risk is driven by agent-enabled security testing capability, not malware-like behavior.