payloads-saml

The skill’s offensive SAML testing capabilities match its stated purpose, and it contains no direct credential harvesting, hidden execution, or skill-controlled exfiltration. However, it provides actionable authentication-bypass and exploitation payloads and encourages automated active testing, so it presents high security risk if used against systems without explicit authorization.