hunt-cors

High-risk offensive security skill. Its behavior is aligned with its stated purpose and it is docs-only with visible authorization gates, so it is not confirmed malware; however, it materially equips an AI agent to probe and prove credentialed CORS data theft against live targets, which makes the overall security risk high despite the safety framing.