cookie-analysis

This skill is internally consistent, but its stated purpose is to help an AI agent bypass web authentication by forging or cracking session cookies. There is no hidden exfiltration, no deceptive installer, and the referenced tool is a normal PyPI/GitHub project, so this is not confirmed malware. However, it gives an AI agent offensive web-attack capability, including brute-forcing Flask secrets and reusing forged cookies against targets, which makes it high security risk.