http-parameter-pollution

SUSPICIOUS: the skill is internally consistent and lacks malware-like exfiltration or supply-chain behavior, but it equips an AI agent with offensive security testing techniques against live targets. Main risk comes from exploit-oriented capability, not hidden installs, credential harvesting, or deceptive data flows.