api-security-testing

SUSPICIOUS. The skill is not deceptive about its purpose, but it equips an AI agent for offensive API security testing and chains into multiple external skills, creating high misuse and transitive-trust risk. The main concerns are offensive-security enablement and third-party skill/install trust, not confirmed malware or direct data exfiltration in this file.