burpsuite-project-parser

SUSPICIOUS: the skill’s purpose mostly matches its behavior, but it relies on a non-official third-party Burp extension from a personal GitHub repo, loaded into a sensitive security tool, with limited release-verification evidence. Data flow appears local and there is no clear credential theft or exfiltration path in the provided text, so this is not confirmed malware, but the supply-chain and security-tooling risks are high enough to avoid a benign classification.