hunt-brute-force

SUSPICIOUS. The skill is internally consistent as a penetration-testing playbook, but its actual footprint is an offensive AI-agent capability: it instructs automated brute forcing, credential stuffing, OTP guessing, IP-header spoofing, and live testing against authentication systems. There is no clear credential exfiltration to attacker-controlled domains and no suspicious installer, so this is not confirmed malware; however, it is a high-risk security skill because it operationalizes attack techniques against real services.