supabase-extract-url

SUSPICIOUS: the skill is internally consistent, but it is an AI-agent pentest reconnaissance tool that enables offensive security activity and chained follow-on secret extraction. No clear malware, credential theft, or suspicious third-party routing is present, but the offensive use case and autonomous local evidence collection make it high security risk.