js-secrets-extraction

SUSPICIOUS: the skill is purpose-built for offensive web reconnaissance and secret extraction, including active validation against live services. It also weakens TLS checks and routes potentially sensitive source-map content to third-party analysis sites, making it high risk for AI-agent use even though it is not confirmed malware.