api-security-automation

SUSPICIOUS/HIGH-RISK skill. Its capabilities match its purpose, but that purpose is offensive API security automation with authenticated abuse testing, interception tooling, and many external dependencies. The main concerns are high-impact security testing by an AI agent, credential forwarding into third-party tools, and moderate supply-chain risk from mixed tool provenance; this is dangerous but not confirmed malware.