python-web-debug

SUSPICIOUS. The skill is an offensive exploitation playbook for debug-mode Python web apps, including PIN bypass workflow and RCE steps. Its behavior is coherent with its stated purpose, so the main concern is not hidden exfiltration or supply-chain abuse but that it equips an AI agent to conduct intrusive security attacks against targets.

This fragment is an offensive exploit guide targeting SSRF and an exposed Werkzeug debugger. It demonstrates sensitive-file disclosure and authenticated command execution, but does not itself show automatic execution, persistence, or data exfiltration by an installed package. It should be treated as high-risk security content if included in a production package or exposed to users without authorization.