hunt-nosqli

SUSPICIOUS: the skill is internally consistent as an offensive NoSQLi playbook, but it gives an AI agent explicit exploitation capability against live systems and recommends an unpinned third-party security tool with weak provenance. No clear credential theft, hidden exfiltration endpoint, or pre-execution malware behavior is present, but this remains a high-risk exploit skill rather than a benign developer guide.