web-vuln-graphql

SUSPICIOUS: the skill is internally coherent as a GraphQL security-testing guide, but its actual function is to give an AI agent offensive testing techniques against live targets, including authorization bypass, brute-force/rate-limit bypass, and DoS probes. No strong malware or credential-stealing behavior is present, but the capability set is high-risk by design.