hunt-forgot-password

SUSPICIOUS: the skill is internally consistent as a bug-hunting playbook, but its purpose is to equip an AI agent with offensive authentication-testing capabilities against external systems. No malware, exfiltration endpoint, or supply-chain abuse is present, yet the autonomous security-scanning nature makes it high risk as an agent skill.