hunt-api-misconfig

SUSPICIOUS. The skill is internally coherent as an API misconfiguration hunting guide, but it equips an AI agent with offensive security techniques and exploit chains against external targets. There is no evidence of malware, credential harvesting, hidden execution, or third-party exfiltration; the main risk is that this is a high-risk pentesting/exploitation skill for an autonomous agent.