snaffler

SUSPICIOUS/HIGH-RISK skill: internally coherent as a Snaffler reference, but it equips an AI agent with offensive AD credential-hunting behavior and broad access to sensitive share contents. No clear third-party exfiltration or proven malware is present, yet the real-world impact and secret exposure risk are high.