testing-for-xss-vulnerabilities

High-risk offensive security skill. Its capabilities are internally consistent with XSS testing, but it instructs an AI agent to deliver exploit payloads, bypass defenses, and route sensitive browser data to blind-XSS collection endpoints. Not confirmed malware, but dangerous and unsuitable outside tightly authorized security workflows.

This module is an active XSS assessment/exploitation tool (reflected probing and optional stored-XSS submission). It contains no explicit backdoor or stealth behavior in this fragment, but it is highly dual-use and operationally hazardous: it disables TLS certificate verification, sends attacker-crafted XSS payloads over the network to configurable endpoints, and can include an Authorization Bearer token from CLI input. If included in a supply chain without strict intent and execution controls, it could be misused to attack targets rather than just evaluate them.