hunt-forgot-password

SUSPICIOUS. The skill is internally coherent and contains no supply-chain or credential-harvesting installer behavior, but it is an offensive security skill that equips an AI agent to enumerate users, obtain or replay reset tokens, and validate account-takeover paths against live targets. Risk is high due to exploit capability and autonomous real-world testing potential, not because of malware or hidden data exfiltration.