payloads-xss-polyglots

SUSPICIOUS: the skill is internally consistent and contains no installer, credential, or hidden-exfiltration behavior, but it explicitly equips an AI agent with offensive XSS payloads and guidance for blind/stored XSS. This is not malware, yet it is a high-risk exploit-oriented skill.