privilege-escalation-web

SUSPICIOUS. The skill is internally consistent, but its purpose is to equip an AI agent with offensive web-exploitation techniques against live applications. There is no clear credential-harvesting or malware behavior in the text itself, yet the capability is high-risk because it enables autonomous authorization bypass and privilege-escalation testing on targets.

The supplied material is an offensive web-security testing guide focused on authorization bypass and privilege escalation. It contains no package code and no direct malware behavior. Its techniques could cause unauthorized access if applied to systems without permission or if an application has flawed server-side authorization. Backend authorization must be enforced independently of client-controlled roles, cookies, headers, and frontend state.

This artifact is a weaponized, attacker-oriented instruction set for privilege escalation and authorization bypass against web applications. It is not executable malware code, but it provides highly actionable steps to tamper with cookies/sessions (including re-signing guidance tied to SECRET_KEY) and to bypass /admin access controls, making it a significant supply-chain misuse security risk if distributed as a dependency/tooling component.