testing-api-tester

SUSPICIOUS: The skill is internally coherent for API testing and does not show credential theft, covert exfiltration, or suspicious installers. However, it explicitly equips an AI agent to perform active security testing and penetration-style validation against APIs, which is a high-risk capability even when aligned to the stated purpose.