csrf-cross-site-request-forgery

SUSPICIOUS. The skill is internally consistent as an offensive CSRF attack playbook, but that purpose gives an AI agent concrete exploit capability against web targets. There are no notable supply-chain or credential-exfiltration signals, yet the offensive security scope alone makes overall risk high.