payloads-waf-bypass

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive WAF-bypass and exploit-evasion techniques, including command-injection transforms and security-control bypasses. There is no strong evidence of credential theft, covert exfiltration, or malicious installer behavior, so this is not confirmed malware; the main concern is high-risk offensive capability and potential misuse.