dynamic-application-security-testing

This skill is purpose-consistent for DAST and does not show clear malicious exfiltration or deceptive install behavior. However, it gives an AI agent active offensive security capabilities and handles sensitive auth material through external scanners, so it should be classified as high security risk but not malware.