hunt-xxe

High-risk offensive security skill. Its behavior is internally consistent with its stated XXE-hunting purpose, but that purpose is to probe arbitrary targets, trigger OOB callbacks, exfiltrate victim data, and pivot to SSRF/RCE. No strong malware/install-trust evidence is present, yet the capability set is dangerous and inappropriate for a general AI agent without strict authorization and scope controls.