09-web-security

SUSPICIOUS. The skill is internally coherent and not overtly malicious: installs are modest, no credential harvesting path is shown, and references mostly match legitimate security tooling. However, it is an offensive security skill that enables an AI agent to perform live vulnerability testing, exploit-style probing, metadata-targeted SSRF, blind callback techniques, and auth/JWT attacks. That makes the skill high risk even though the behavior aligns with its stated pentesting purpose.

The code is an authorized-use API security scanner with active testing behavior, not apparent malware. It contains a significant transport-security weakness because all TLS certificate validation is disabled, and it has operational risks from active login/request probing and command-line token handling. No credential theft, exfiltration, persistence, destructive behavior, or hidden network destination is present in the supplied fragment. The fragment also cannot run as written because of incomplete syntax at DISCLAIMER and the final main call.