burpsuite-project-parser

SUSPICIOUS: The skill's purpose and capabilities mostly align for Burp project analysis, and data flows stay local to Burp/project files. The main concern is install trust: the skill relies on a third-party GitHub JAR for its core functionality without strong verification guidance, which is a meaningful supply-chain risk but not clear malware or credential theft.