hunt-rag-vector

SUSPICIOUS: the skill is internally coherent as a RAG security testing guide and does not show installer, credential-harvesting, or third-party proxy abuse, but it gives an AI agent active offensive testing procedures against live targets, including exfil-style validation patterns and cross-tenant probing. High security risk comes from the enabled behavior, not from malware indicators.