curl

SUSPICIOUS: The skill is coherent as a curl guide for authorized pentesting, and it does not install third-party tooling or route credentials through an unexpected intermediary. But it materially equips an AI agent for offensive web testing, includes TLS-bypass usage, SSRF validation, and an unsafe executable download example over HTTP from a bare IP. This is not confirmed malware, but it is a high-risk dual-use skill whose capabilities exceed normal low-risk documentation.