web-security

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive web exploitation capability. There is little direct supply-chain concern in the bundled files, yet the exploit instructions, Bash access, and data-extraction payloads create high operational risk and make this unsuitable as a general-purpose skill.