hunt-api-misconfig

SUSPICIOUS/HIGH-RISK. The skill is internally consistent as an offensive API security hunting playbook, but its actual footprint is to equip an AI agent with exploit-oriented reconnaissance and validation steps against live targets. No strong malware or credential-stealing behavior is embedded, yet the offensive security purpose, sensitive-data extraction paths, and attack chaining make it a high-risk skill.