payloads-clickjacking

The skill contains no evident credential theft, exfiltration, or supply-chain payload. However, it provides operational clickjacking and protection-bypass techniques that enable covert user manipulation, making the skill high risk for an AI agent despite its authorized-use framing.