testing-cors-misconfiguration

SUSPICIOUS: the skill is internally aligned with its stated pentest purpose, but it gives an AI agent concrete offensive instructions for browser-based data theft and exfiltration. No hidden installer or credential-harvesting binary is evident, yet the exploit workflow enables high-risk real attack behavior and should be treated as a dangerous offensive-security skill.