csrf

SUSPICIOUS. The skill is coherent as a CSRF testing guide and does not show malware, exfiltration, or installer abuse, but it equips an AI agent with offensive web exploitation procedures and payloads that can trigger unauthorized state-changing actions on real targets.