burpsuite

SUSPICIOUS: The skill is internally coherent for Burp Suite usage and uses official PortSwigger references, so it does not look like credential theft or supply-chain malware. However, it is a high-risk offensive security skill for AI agents, and it also recommends disabling certificate validation via --ignore-certificate-errors, which materially increases misuse and security risk.