hunt-api-misconfig

SUSPICIOUS: the skill is internally consistent as an API misconfiguration hunting guide and shows no hidden credential theft, malicious installer, or covert exfiltration. However, it is still a high-risk offensive-security skill for AI agents because it teaches active exploitation workflows and suggests chaining into other attack-oriented skills, so the overall security risk is elevated despite the authorization gate.