waf-rule-creator

SUSPICIOUS: the skill is not overtly malicious and shows no exfiltration, credential harvesting, or installer abuse, but it is underspecified and grants unrestricted Bash access disproportionate to its generic WAF-guidance purpose. Risk comes mainly from broad execution scope and vague operational boundaries, not confirmed malicious behavior.