open-redirect

SUSPICIOUS: the skill's footprint is coherent with its stated purpose, but that purpose is to give an AI agent offensive exploitation guidance. It materially increases capability for phishing, token theft, and SSRF without defensive constraints, so it is high security risk even though it lacks malware-like installers or hidden exfiltration code.