web-prototype-pollution

SUSPICIOUS: the skill is internally consistent and does not show credential theft, hidden execution, or malicious exfiltration, but it is a high-risk offensive security skill that enables an AI agent to perform vulnerability discovery and exploitation against web applications. Supply-chain risk is low because there are no install instructions; the main concern is exploit enablement.