hunt-springboot

SUSPICIOUS: the skill is internally consistent with offensive Spring Boot exploitation, but that purpose gives an AI agent high-risk attack capabilities. Main risks are exploit execution, credential extraction from heap dumps/env, and arbitrary callback-based data flow to third-party hosts; install provenance itself is mostly benign.