okta-attack

SUSPICIOUS: the skill is internally coherent as an Okta attack-chain guide, but its actual purpose is offensive intrusion against external identity systems. It mainly targets official Okta APIs rather than exfiltrating to attacker infrastructure, so this is not confirmed malware; however, enabling an AI agent to perform credential attacks, MFA bypass testing, and post-compromise admin actions creates high security risk. The only supply-chain concern in the provided text is the unverifiable third-party tool reference, not the Okta API examples themselves.