cors-misconfig

SUSPICIOUS. The skill is internally coherent as a CORS exploitation guide, but its actual footprint is offensive: it teaches an AI agent to validate, weaponize, and exfiltrate authenticated cross-origin data from targets. Install trust is low concern, yet the explicit attacker PoCs and exfiltration flows make this a high-risk offensive security skill rather than a benign documentation aid.