xss-stored

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive stored-XSS exploitation, and the actual content aligns with that by providing payloads for session theft, BeEF hooking, and victim-side action execution. No malware-specific stealth, obfuscation, or deceptive installer behavior is present, but the capability set is inherently dangerous for an AI agent because it operationalizes exploitation and credential theft.