hunt-subdomain

SUSPICIOUS. The skill is internally coherent as a subdomain-takeover hunting guide, but its actual purpose is to equip an AI agent with offensive security and exploitation capabilities, including account-takeover and phishing-enabling chains. There is little evidence of local credential theft or hidden malware, but the offensive scope, real-world action potential, and transitive skill references make it high risk.