tools-burp-suite

The skill is internally consistent with its stated purpose: it is a Burp Suite pentesting workflow guide, and the official PortSwigger MCP/BApp path is plausible and locally scoped. However, it equips an AI agent with offensive security capabilities and autonomous network actions against live targets, including scanning, brute-force enumeration, and OOB testing, so it should be classified as high security risk but not malware.