hunt-nodejs

This skill is purpose-aligned but high risk: it is an AI-agent offensive security skill that provides exploitation workflows, OOB callback patterns, and credential-access techniques against Node.js targets. There is no hidden installer, third-party credential forwarding, or covert exfiltration to the publisher, so it is not confirmed malware, but enabling an agent to perform penetration testing and exploit attempts makes it a high-risk vulnerable skill.