xss-html-injection

SUSPICIOUS/HIGH-RISK offensive skill. Its capabilities align with its stated purpose, but that purpose is to enable exploitation: it includes credential theft, session hijacking, phishing, CSP bypass, and exfiltration payloads to attacker-controlled endpoints. There is little supply-chain risk, but the operational risk is high because the skill gives an AI agent concrete offensive techniques with real-world harm potential.