broken-authentication

The skill is purpose-aligned and does not show credential exfiltration or a suspicious install chain. Its detailed credential attack and authentication-bypass procedures create substantial dual-use risk despite the authorization constraints.