hunt-nextjs

SUSPICIOUS/HIGH-RISK skill. It is internally consistent as an authorized Next.js pentest guide, but it gives an AI agent offensive security procedures including SSRF, auth bypass, IDOR, and debug/file-read testing, with optional third-party OAST routing. Not malware, but high security risk because the capability itself is exploit-oriented and could be misused outside authorized scope.