exploiting-mass-assignment-in-rest-apis

SUSPICIOUS: the skill is internally consistent, but its purpose is offensive security and it gives an AI agent concrete exploitation steps against REST APIs, including authenticated privilege escalation and business-logic abuse. Tool references are mostly legitimate, yet the operational footprint is still high-risk because it enables real-world attacks rather than benign documentation or defensive validation alone.