performing-csrf-attack-simulation

SUSPICIOUS/HIGH-RISK skill. Its behavior is internally consistent with an authorized CSRF assessment guide, and the cited install source is legitimate, so this is not confirmed malware. However, it equips an AI agent with offensive web exploitation procedures against authenticated targets, which creates substantial real-world misuse risk even without credential theft or covert exfiltration.