hunt-ssti

SUSPICIOUS. This is an offensive security skill that explicitly prioritizes server-side RCE and includes payloads and chains for SSRF, cloud credential retrieval, persistent template changes, and stored XSS. The examples are not pre-execution commands and no supply-chain or user-credential forwarding issue is evident, but the skill enables consequential attacks without requiring authorization boundaries or per-action approval.