hunt-file-upload

SUSPICIOUS: the skill’s footprint is coherent with offensive file-upload exploitation, but that purpose itself gives an AI agent exploit capability with real-world impact. The main additional risk is unpinned third-party exploit tooling from unverifiable or personal upstreams; there is no clear credential theft from the local user, but the skill enables exploitation and remote data exfiltration against targets.