hunt-nextjs

SUSPICIOUS: the skill’s footprint is coherent with its stated purpose, but that purpose is offensive vulnerability hunting for AI agents. It enables active exploitation and data extraction against external targets, including SSRF and auth-bypass testing, so security risk is high despite low supply-chain concern and no confirmed malware behavior.