Exploit validation skill for authorized environments, attack-surface review, and bounded proof-of-impact workflows.