attack-surface-xss

SUSPICIOUS. The skill is internally consistent as a passive XSS reconnaissance skill and shows no credential harvesting, hidden exfiltration, remote installer, or pre-execution malware behavior. However, its purpose is offensive security enablement for an AI agent, including exploit-oriented analysis and delegation to active testing, which makes it higher risk than ordinary developer workflow skills.