hunt-ato

SUSPICIOUS: the skill is internally coherent as an authorized ATO-testing playbook, but its footprint is inherently high risk because it gives an AI agent offensive account-takeover procedures, OOB token capture patterns, and exploit chains. No confirmed malware, obfuscation, credential theft payload, or deceptive installer is present, but this is still dangerous offensive capability that should be tightly controlled.