http2-specific-attacks

This skill is internally consistent with its stated purpose, but that purpose is offensive exploitation. It is not malware and does not obviously exfiltrate credentials, yet it gives an AI agent high-risk security testing and DoS capabilities against arbitrary targets. Official-source evidence lowers supply-chain concern, but the overall skill should be classified as high-risk/suspicious due to offensive-agent enablement.