hunt-cors

SUSPICIOUS: the skill is coherently scoped as a CORS-hunting/offensive web security guide, but it gives an AI agent explicit exploitation and exfiltration workflows against live targets. No hidden malware behavior is evident, yet it is a high-risk offensive security skill with moderate documentation-only supply-chain concerns.