owasp-top-ten-check

The skill is coherently focused on OWASP security auditing and contains no evident credential harvesting, exfiltration, installation chain, or malicious payload. Its exploit-testing guidance is dual-use and lacks an explicit authorization boundary, so use should be limited to systems the user is authorized to assess.