web-dom-clobbering

SUSPICIOUS: the skill is coherent as an offensive security guide, but it equips an AI agent with exploit-focused DOM clobbering techniques. There is no evidence of malware, credential theft, installer abuse, or hidden exfiltration; risk comes from offensive capability rather than deceptive behavior.