hunt-lfi

SUSPICIOUS. The skill is internally coherent, but its purpose is to give an AI agent offensive exploitation capability against real targets, including credential extraction and RCE workflows. The main trust issue is direct execution of an unpinned GitHub research tool; the larger risk is the skill's explicitly offensive real-world impact rather than hidden malware behavior.