specialist-testing-testing-api-tester

SUSPICIOUS: the skill is coherent for API testing, but it grants an AI agent security-testing and vulnerability-assessment capability with potential real-world impact on external systems. No direct malware, credential harvesting, or installer abuse is present in the provided text, but the offensive testing scope and unverified delegated subagent make it a medium-to-high security risk.