websocket-security

SUSPICIOUS: the skill is coherent as a WebSocket security testing guide, but it gives an AI agent offensive security capabilities, includes attacker-style exfiltration PoCs, references third-party pentest tools, and shows TLS verification disabled in code. This is not confirmed malware, but it is a high-risk security skill rather than a benign developer helper.