hunt-html-injection

SUSPICIOUS. The skill is internally consistent and does not show credential theft, hidden exfiltration, or suspicious install behavior, but it is an offensive security skill that equips an AI agent to conduct vulnerability testing against live targets. The explicit authorization gate lowers misuse risk, yet the capability itself is high risk for an agent and does not fit a low-risk benign classification.