api-security-testing

SUSPICIOUS: the skill’s purpose and capabilities are aligned, but it grants high-risk offensive security functionality to an AI agent and relies on transitive third-party skills with unclear provenance. The prompt-injection finding itself is weak, yet the overall security risk is elevated by pentest capability and indirect trust expansion.