hunt-clickjacking

SUSPICIOUS. The skill is internally consistent and has low supply-chain/data-exfiltration risk, but it equips an AI agent with offensive browser-based vulnerability testing against sensitive authenticated flows. That makes it high-risk as a security/exploit capability even without overt malicious payloads.