hunt-source-leak

High-risk offensive security skill. Its behavior is internally consistent with reconnaissance for source leaks, but that purpose itself gives the agent powerful exploit-adjacent capability: scanning arbitrary targets, reconstructing source, extracting secrets, and mapping internal APIs. Supply-chain risk is moderate due to unpinned third-party tool installs, but there is no strong evidence of hidden credential theft or malware.