hunt-forgot-password

SUSPICIOUS. The skill is internally consistent with its stated purpose as an authorized password-reset security testing aid, and it does not show malicious exfiltration, hidden execution, or suspicious third-party credential routing. However, it is an offensive security skill that enables active auth probing and account-recovery exploitation steps against live targets, so its overall security risk is high even though evidence of malware intent is low.