bug-bounty

SUSPICIOUS / HIGH-CAPABILITY DUAL-USE SKILL. Its stated bug-bounty purpose is coherent with the extensive offensive testing techniques, and there is no evidence of hidden load-time execution, credential harvesting by the skill, or covert exfiltration. However, it enables broad active exploitation and secret/data extraction, has substantial untrusted-content prompt-injection exposure, recommends transitive skill loading, and uses largely unpinned third-party tools. Use only on explicitly authorized in-scope targets with human approval for destructive, state-changing, or data-exfiltration tests.