http-host-header-attacks

SUSPICIOUS: internally coherent as a Host-header attack playbook, but it equips an AI agent with offensive security techniques, token-capture workflows, OAST routing, brute-force vhost discovery, and SSRF-style internal targeting. There is little supply-chain risk, but the operational security risk is high because the skill’s purpose is exploitation.