hunt-xss

SUSPICIOUS: the skill is internally coherent as an XSS hunting playbook, but its purpose is to equip an AI agent with offensive exploitation capability against arbitrary targets. There is little supply-chain risk, yet the operational security risk is high because it enables exploit discovery, payload delivery, OOB confirmation, and token/ATO chaining.