testing-for-host-header-injection

SUSPICIOUS: the skill is internally consistent as a penetration-testing guide, but it gives an AI agent offensive security procedures including SSRF probing, cache poisoning, password-reset poisoning, and use of known interception services. There is no deceptive installer or hidden credential harvesting, so it is not confirmed malware, but it is a high-risk exploit-oriented skill.