hunt-cicd

HIGH risk offensive CI/CD exploitation skill. Its stated purpose matches its capabilities, but those capabilities include active exploit execution, credential extraction, and exfiltration to known interception services. Trust is further reduced by unpinned third-party installs and execution of a target-host-supplied Jenkins CLI JAR. This is best classified as suspicious/high-risk rather than confirmed malware.