payloads-css-injection

SUSPICIOUS: This is an explicitly offensive CSS-exploitation guide with practical data-exfiltration payloads. Its stated authorized-testing purpose is coherent, and there is no evidence of credential harvesting by the skill itself, hidden execution, or shell injection; however, the techniques can expose sensitive data if used against unauthorized targets. The optional unpinned container adds limited supply-chain risk.