hunt-host-header

SUSPICIOUS/HIGH-RISK offensive security skill. It is internally consistent with its stated purpose, but that purpose is to equip an AI agent to perform real exploit testing and token capture against external systems, including SSRF to metadata services and password-reset/OAuth takeover chains. No malicious installer or stealth behavior is present, so this is not confirmed malware, but it is a high-risk exploit capability skill.