api-graphql

SUSPICIOUS. The skill is internally consistent as a pentest technique, but it is a high-risk offensive security skill that equips an AI agent to enumerate schemas, brute-force fields, bypass authorization, and stress target APIs. There are no strong malware indicators or covert credential theft, but the capability itself is dangerous and unsuitable outside tightly controlled authorized testing.