websocket-security

SUSPICIOUS/HIGH-RISK skill. Its purpose is coherent as a WebSocket offensive-security guide, but that purpose itself gives an AI agent exploit capability against live systems, includes exfiltration PoCs, disables TLS verification in sample code, and expands into additional security-testing scope. Install sources are mostly legitimate registries/stores, so this is not confirmed malware, but it is a high-risk offensive security skill.