heap-exploitation

SUSPICIOUS. The skill is internally coherent, but its stated purpose is to give an AI agent offensive heap-exploitation capability leading to arbitrary write and code execution. Supply-chain risk is moderate due to external tool installs and the mismatched `heapinspect` PyPI package; the dominant risk is that this is an exploit-enablement skill for AI agents.

The provided fragment is high-risk offensive exploit guidance targeting glibc stdio internals (FSOP). It explicitly describes paths to (a) leak memory by corrupting FILE output pointers, (b) perform arbitrary memory writes by corrupting stdin FILE buffer metadata, and (c) potentially gain code execution by forging vtable/function-pointer structures and triggering exit/cleanup flush paths. Even if it is only documentation/tooling, embedding such content in a distributed package/artifact would be concerning and warrants deep investigation of repository context, build scripts, and whether any of this logic is executed or dropped at install/runtime.

The provided fragment is highly actionable offensive guidance targeting glibc heap and stdio/loader internals to achieve memory corruption and potential control-flow hijacking (RCE-style outcomes). It contains no actual runtime package logic in the snippet, so direct malware execution cannot be confirmed from this fragment alone; however, embedding such weaponization material in a distributed dependency would be a serious supply-chain security concern. Further review of the full package is needed to determine whether it is merely documentation or whether install/runtime code uses these techniques to attack real systems.