hunt-saml

Purpose and capabilities are internally consistent for an offensive SAML assessment skill, and install/data-flow trust is relatively clean because it is docs-only with no downloader or credential forwarding. The main risk is that it gives an AI agent concrete exploit workflows for auth bypass and XXE against live systems; disclaimers and confirmation gates reduce but do not remove that operational risk.