rever

SUSPICIOUS. The skill is internally aligned with its stated purpose of web/API reverse engineering, but that purpose itself grants high-risk offensive capabilities and access to sensitive browser/session data. The main concern is not obvious malware but the combination of an unverified third-party local MCP service, broad token/cookie/request visibility, and active interception/fuzzing features that exceed a low-risk developer helper.