php-type-juggling

This skill is not covert malware and does not harvest credentials or install unverified tooling, but it is a high-risk offensive security skill. Its actual footprint matches its stated exploit purpose: it teaches an AI agent to probe and bypass authentication on arbitrary PHP targets, so it should be classified as suspicious/high-risk rather than benign.