acidrain-security-testing-scripts

SUSPICIOUS: the skill’s stated purpose matches its offensive capabilities, but it is still high risk because it equips an AI agent to perform web exploitation workflows, includes explicit cookie exfiltration examples, and relies on an unpinned third-party GitHub repo unrelated to the publisher. This looks more like a risky offensive-security skill than confirmed malware.