yao-websecurity-skill

SUSPICIOUS: the skill is internally coherent for a security-audit purpose and does not show obvious credential theft or exfiltration paths, but it grants an AI agent high-risk offensive security capabilities and processes untrusted external targets with command-capable workflows. Main concern is capability class and active testing scope, not clear malware behavior.