web2-vuln-classes

High-risk offensive security skill. It is internally consistent as a bug-hunting/exploitation reference, but its actual footprint is to enable an AI agent to perform scans, exploit chains, OAST callbacks, and dependency-confusion PoCs against external systems. Not confirmed malware, but unsafe and inappropriate for general agent use.