ctf-web

SUSPICIOUS. The skill is internally consistent as a CTF exploitation playbook, but its core function is offensive security guidance for an AI agent: fuzzing targets, abusing vuln classes, escalating to RCE, and reading sensitive files on remote hosts. There is no obvious credential theft, hidden exfiltration, or malicious installer, so this is not confirmed malware; the main issue is high misuse potential and offensive capability outside normal developer-assistance scope.