xxe

SUSPICIOUS: the skill is internally consistent, but its purpose is offensive exploitation. Supply-chain risk is low, yet the skill materially enables an AI agent to probe targets, read local files via XXE, trigger SSRF, and exfiltrate data through attacker-controlled callbacks.