bb-local-toolkit

The skill is an extensive offensive security guide whose capabilities broadly match its stated bug-bounty purpose, and it includes scope and validation cautions. It nevertheless provides detailed exploit and secret-exfiltration procedures, creating meaningful misuse risk; external-content prompt-injection exposure and unpinned installation sources add lesser concerns. No evidence shows automatic exfiltration, credential harvesting by the skill, or a dangerous pre-execution directive.