web-app-security-audit

SUSPICIOUS. The skill is internally consistent with its stated purpose as a web app security audit guide, and its data flows and tool references are mostly legitimate. However, it enables active penetration-testing behavior by the agent, which is a high-risk capability category even without obvious malware, exfiltration, or deceptive install behavior.