web-account-takeover

SUSPICIOUS: the skill is internally coherent and has no supply-chain or credential-forwarding red flags, but it is an offensive security technique that teaches an AI agent how to achieve account takeover on web targets. Low malware indicators, moderate overall security risk due to exploit-focused capability.