hunt-source-leak

SUSPICIOUS. The skill’s behavior is internally consistent with its stated purpose, but that purpose is offensive security reconnaissance for AI agents. It drives broad scanning of arbitrary external targets, installs multiple third-party tools, and includes one unverifiable GitHub-hosted script, making the overall security risk high even without clear malware or credential-harvesting behavior.