test-red-team

The skill is purpose-aligned and uses mostly legitimate tooling, but it is a high-risk offensive security skill for AI agents. Main concerns are exploit-enabling instructions, direct backend/DB verification access, and broad autonomous testing actions; supply-chain risk is moderate rather than severe because Playwright is installed from official npm sources.