identity-provider-recon

The skill is internally coherent and uses mostly official service endpoints, so it does not look deceptive or like credential harvesting malware. But it is a high-risk offensive security skill: it equips an AI agent to perform identity reconnaissance, federation mapping, and active pre-auth user enumeration against external organizations, producing confirmed valid-account lists for later attack phases.