api-security-testing

Suspicious workflow bundle. The file itself is mostly inert guidance, but it delegates offensive security actions to unpinned external skills and is explicitly designed to equip an AI agent for exploit-style API testing. Main risk is transitive skill trust plus high-risk security testing capability, not confirmed malware.