bb-local-toolkit

SUSPICIOUS. This skill is internally consistent with an offensive bug-bounty purpose, but that purpose itself grants an AI agent high-risk exploitation capabilities: target probing, exploit chaining, secret-exfil testing, CI/CD attack guidance, and AI prompt-injection abuse. The main concern is not hidden malware or deceptive installs; it is that the skill meaningfully enables offensive security actions and data-exfiltration workflows beyond normal developer assistance.