hunt-graphql

SUSPICIOUS/HIGH-RISK skill. Its purpose and capabilities are internally consistent as a GraphQL vulnerability-hunting skill, but that purpose is itself offensive: it equips an AI agent to probe and exploit authz, IDOR, SSRF, brute-force, and race-condition weaknesses on arbitrary targets. The curl findings are mostly documentation-only, but the skill still presents high security risk due to exploit enablement and token forwarding to external tools. Not confirmed malware.