kiterunner

SUSPICIOUS. The install source is relatively coherent and same-org, but the skill’s core function is to give an AI agent offensive API discovery/brute-forcing capability with optional authenticated requests and replay against external systems. That makes it high security risk as an AI-agent skill, though not confirmed malware or credential theft.