security-testing

SUSPICIOUS: The skill is internally consistent as a security-testing guide, but it equips an AI agent with offensive security and pentest capabilities against live targets, which is high risk by design. Supply-chain concerns are moderate due to an unpinned official GitHub Action and outdated ZAP image reference, but there is no clear credential theft or exfiltration behavior.