web-open-redirect

SUSPICIOUS. The skill is internally coherent as an open-redirect exploitation technique, but it equips an AI agent with offensive security capabilities and explicitly describes credential/token theft and SSRF bypass chains. It has low supply-chain risk and no hidden installs, yet the operational use is high-risk because it enables abuse against external targets.