hunt-spa-api

SUSPICIOUS/HIGH-RISK vulnerable skill, not confirmed malware. Its purpose and capabilities are internally consistent, and there is little supply-chain concern, but it is an offensive security playbook for AI agents that enables external reconnaissance and auth-bypass testing against live targets.