hunt-graphql

SUSPICIOUS: the skill is coherent with its stated purpose, but that purpose is offensive security hunting. It provides actionable exploit and validation guidance against live GraphQL targets, with only policy-based authorization gates and some reliance on third-party GitHub security tools. No direct malicious payload or covert exfiltration is present, but the capability set is inherently high-risk for an AI agent.