testing-for-open-redirect-vulnerabilities

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive security, but the content goes beyond benign assessment into explicit exploitation and credential/session theft. Official security tools are mixed with a less-verifiable third-party utility, and the documented data flows intentionally route tokens/cookies to attacker-controlled or callback-collection endpoints. This is not confirmed malware by itself, but it equips an AI agent to conduct harmful attacks and exfiltration.