hunt-sharepoint

This skill is not covertly malicious: its offensive capabilities are broadly consistent with its stated SharePoint hunting purpose, and it does not hide installers, steal local credentials, or route secrets to unrelated services. However, it is a high-risk AI-agent security tool because it operationalizes exploit reconnaissance, brute-force-adjacent testing, NTLM capture, smuggling checks, and attack-chain handoffs; the authorization gate is policy text, not a technical control.