burp-suite-testing

SUSPICIOUS: The skill is internally coherent as a Burp testing guide and shows no clear credential theft or malicious exfiltration, but it gives an AI agent explicit offensive web security testing and exploitation workflows. Risk is driven by exploit capability and real-world attack actions, not by supply-chain or covert behavior.