dynamic-application-security-testing

SUSPICIOUS: the skill is internally consistent for DAST, but it grants an AI agent high-risk offensive security capabilities and forwards authentication secrets into external scanners. Install sources appear mostly official rather than deceptive, so this is not confirmed malware; the main concern is dangerous scope and real-world impact, not hidden exfiltration.