mitm-find-callback

SUSPICIOUS. The skill is internally consistent for payment callback security testing and does not show credential theft, hidden exfiltration, or untrusted installer behavior. However, it is an offensive security skill aimed at manipulating payment callbacks on real endpoints, so the main risk is misuse and real-world impact rather than covert maliciousness.