web-security-testing

SUSPICIOUS: the skill is internally aligned with its stated purpose, but that purpose is to orchestrate offensive web-security testing and to invoke multiple unverified downstream skills. There is no direct credential theft or exfiltration in this file, yet the offensive capability and transitive trust model make it high risk for agent deployment.