hunt-shadow-api

SUSPICIOUS: the skill is internally consistent with a red-team/API security purpose and does not show credential harvesting, hidden installs, or third-party exfiltration. However, it is a high-risk offensive security skill that directs an AI agent to probe remote systems and test authentication/version regressions, so it should be treated as dangerous despite the added authorization gate.