testing-web-applications

SUSPICIOUS: the skill is internally consistent as an offensive web-app pentesting guide, but its actual capability is to help an AI agent exploit applications, steal credentials, access sensitive files, and establish web shells. There is little supply-chain concern, but the offensive security scope makes overall risk high even without hidden execution or credential harvesting by the skill itself.