Cross-Site Scripting and HTML Injection Testing

SUSPICIOUS: the static findings themselves are mostly benign documentation artifacts, but the skill is fundamentally an offensive security/exploit guide for an AI agent. Its actual footprint is to help perform XSS attacks, steal cookies, capture sessions, phish credentials, and deliver malicious links; that is high-risk and not a normal benign developer workflow skill.