dast-workflow

SUSPICIOUS from a platform-risk perspective, not because of deception: the skill is internally coherent and uses mostly official tooling, but it equips an AI agent with offensive web security scanning capability, authenticated credential use, and Burp Collaborator OOB routing. That combination makes it high security risk even though it does not show confirmed malware or obvious credential theft behavior.