hunt-csrf

SUSPICIOUS: the skill is internally coherent as a CSRF hunting guide, but its actual purpose is to equip an AI agent with offensive security capabilities against live authenticated targets. There is no clear malware or credential-harvesting server, yet the exploit-focused scope, session-cookie handling, and autonomous testing guidance make it high-risk.