hunt-nextjs

SUSPICIOUS/HIGH-RISK: the skill is internally coherent as a Next.js exploitation playbook, but that purpose itself gives an AI agent offensive security capability against live targets. No strong evidence of credential theft or malicious supply-chain behavior, yet the combination of external-content processing, command execution, OAST use, and active exploitation makes it high security risk.