hunt-session

SUSPICIOUS. The skill is internally consistent with its stated purpose as a session-management testing guide, and I found no hidden installer, credential harvesting endpoint, or covert exfiltration path. However, it is an offensive security skill that enables active exploitation workflows against live targets and handles real cookies, JWTs, and credentials; that makes it high security risk for an AI agent even though there is little evidence of malware or deception.