offensive-phishing

SUSPICIOUS/HIGH-RISK skill. Its stated purpose is offensive phishing, and its actual footprint matches that: phishing infrastructure setup, payload weaponization, credential harvesting, session-token interception, and email evasion. There is no hidden exfiltration beyond the stated offensive goal, so this is not confirmed malware, but it gives an AI agent dangerous real-world offensive security capabilities and explicit credential theft workflows.