web-arsenal

SUSPICIOUS: internally consistent as an offensive web exploitation skill, but the capability itself is high-risk for an AI agent because it operationalizes scanning, exploitation, brute force, and token manipulation against live targets. No strong signs of hidden malware or credential theft, but this should be treated as dangerous offensive-security enablement rather than a benign workflow helper.