business-logic-vulnerabilities

High-risk offensive security skill. It is not covert malware and the flagged command/install patterns are mostly documentation artifacts, but the skill’s real purpose is to equip an AI agent to exploit live systems, steal session material, use exfiltration endpoints, and perform unauthorized testing workflows. Treat as suspicious/high-risk rather than benign.

This is not a dependency/library implementation; it is an exploit-and-payload playbook containing actionable techniques to achieve OS command execution (DDE + web shell with `system($_GET...)`), file system compromise (path traversal to write `shell.php`), and data exfiltration (blind XXE OOB and JSONP/`sendBeacon`). If this content appeared inside a package, it would be a severe supply-chain maliciousness indicator. No benign library functionality is evidenced in the provided fragment.