web-mfa-bypass

SUSPICIOUS/HIGH-RISK skill. Its capabilities align with its stated purpose, but that purpose is to help an AI agent bypass MFA and brute-force OTPs on live targets. There is little evidence of malware or hidden exfiltration, yet the skill is an offensive security technique that can directly facilitate unauthorized account access.