frida

SUSPICIOUS/HIGH-RISK but not confirmed malware. The install path is mostly coherent and official, but the skill’s core purpose is to give an AI agent offensive runtime instrumentation powers, including SSL-unpinning, process hooking, and secret/sink observation across local and remote targets. That footprint is dangerous by design for an autonomous agent, even though the data-flow warnings are explicit and there is no clear credential-harvesting behavior.