performing-web-application-firewall-bypass

SUSPICIOUS. The skill is internally consistent, but its purpose is to help an AI agent bypass security controls and deliver exploit payloads against remote web applications. Install provenance is mixed but mostly official/open-source for named tools; the larger concern is the offensive capability itself, which gives the agent penetration-testing and WAF-evasion behaviors with real-world impact.

This code is an active web application WAF-bypass/probing tool. It crafts and sends XSS, SQL injection, and path traversal payloads (with multiple encoding tricks) to a user-supplied target URL and reports which payloads appear unblocked. Although it is not obviously obfuscated and does not perform local malware actions, its intent and behavior are exploit-oriented and present a high security risk if executed against systems without explicit authorization.