html-injection-testing

SUSPICIOUS: the skill is internally consistent as an HTML-injection exploitation guide, but its actual footprint is a high-risk offensive security capability. It teaches phishing, defacement, and credential-capture flows using external collector endpoints; the authorization gate reduces accidental misuse but does not change that the skill enables harmful real-world actions.