hunt-fintech-graphql

SUSPICIOUS: the skill is internally coherent as a fintech GraphQL security-testing guide and shows no hidden exfiltration, credential theft, or malicious installer behavior. However, it is an offensive security skill for an AI agent, includes exploit workflows that can move money or expose PII on targets, and chains into other skills, so the overall security risk is high despite the explicit authorization gate.