burp-suite

BENIGN in purpose alignment but HIGH RISK in capability: this is a legitimate pentesting skill using official PortSwigger distribution paths, not a covert exfiltration skill. However, it equips the agent with offensive web-testing behavior, handles live auth material, installs a local interception CA, and can forward captured requests into additional tools, so it should be treated as a high-risk security skill rather than malware.