hunt-open-redirect

SUSPICIOUS/HIGH-RISK skill. Its purpose is coherent, but that purpose is to equip an AI agent with offensive security techniques for vulnerability discovery and exploit chaining, including OAuth ATO and SSRF-style abuse. The documented third-party toolchain has mixed install trust, especially the unclear openredirex pip path. No clear credential theft, stealth, or exfiltration behavior is shown, so this is not confirmed malware, but it is a high-risk security skill.