hunt-ato

The skill is internally consistent as an offensive ATO-hunting playbook, with no notable supply-chain or installer deception. It is not malware, but it is a high-risk security skill because it teaches and enables real account-takeover techniques, token interception, brute force, JWT abuse, and chained exploitation against authentication systems.