hunt-oauth

SUSPICIOUS: the skill’s core purpose is to arm an AI agent with offensive OAuth exploitation workflows against arbitrary targets, including token theft and account-takeover chains. While there is little classic supply-chain risk and no hidden installer, the capability footprint is high-risk and disproportionate for general agent use.