hunt-idor

SUSPICIOUS: the skill is internally coherent, but its stated purpose is to help an AI agent perform offensive security testing and exploit IDORs on arbitrary targets, including data theft and state-changing abuse. There is no strong evidence of hidden malware or credential harvesting by the skill itself, but the operational capability is high risk.