web-csp-bypass

SUSPICIOUS/HIGH-RISK. The skill is narrowly focused on offensive web exploitation: bypassing CSP to execute XSS or exfiltrate data. Its capabilities are aligned with that offensive purpose, but that purpose itself gives an AI agent exploit-enablement guidance and explicit data-theft techniques. No supply-chain or credential-forwarding issues are present; the main risk is security misuse.