hunt-shadow-api

SUSPICIOUS: internally coherent and not obviously credential-stealing, but it is an offensive red-team skill that enables active API security probing on real targets. Install/data-flow trust is relatively clean; the main risk is the agent capability itself—enumeration and behavioral testing of hidden API versions can cause unauthorized security testing if misused.