hunt-nextjs

This skill is coherent with its stated purpose, but the purpose itself is high risk: it equips an AI agent to conduct active security testing and exploitation of Next.js targets, including SSRF confirmation through known callback collectors. No hidden installer, credential theft flow, or malware behavior is evident, but the offensive network actions make the skill suspicious and dangerous in deployment.