business-logic-flaws

SUSPICIOUS. The skill is internally consistent and uses legitimate tooling, but its actual function is to give an AI agent offensive web-application testing capabilities, including request tampering, race-condition abuse, and workflow bypass. There is little evidence of malware or covert exfiltration, yet the operational risk is high because the skill enables active exploitation against real targets.