api-bola

SUSPICIOUS. This is a coherent offensive-security skill for API pentesting, not a credential-stealing lure, but it gives an AI agent high-risk exploit-testing behavior against live APIs. Supply-chain risk is low, malware evidence is low, but overall security risk is high because the skill enables authorization-bypass testing with real-world impact.