burpsuite-project-parser

SUSPICIOUS: the stated purpose is coherent, and required access to Burp project files is proportionate, but the skill’s key parsing capability depends on a non-publisher third-party extension from a personal GitHub repo with limited artifact verification. This is mainly a supply-chain trust issue rather than evidence of malicious behavior or credential theft.