web-app-security-inspection

SUSPICIOUS: the skill is internally coherent and avoids third-party install/data-exfil patterns, but its stated purpose is to equip an AI agent with offensive web-security testing capability against live targets. The main risk is operational misuse and autonomous real-world impact, not malware or covert credential theft.