hunt-laravel

SUSPICIOUS: the skill’s offensive capabilities match its stated pentest purpose, but that purpose is itself high risk for an AI agent. The main security concerns are unpinned third-party exploit execution, references to unverifiable helper tooling, and instructions to extract APP_KEYs, tokens, logs, and session material from targets. Not confirmed malware because there is no attacker-owned exfiltration endpoint, stealth directive, or hidden payload, but it is a high-risk offensive security skill.