api-recon-and-docs

This skill is internally consistent as an API reconnaissance playbook, but its purpose is clearly offensive and meant to support exploitation. It has low supply-chain and credential risk, yet it meaningfully increases an AI agent's security-testing capability and encourages chaining into further attack skills, so overall risk is high despite low evidence of malware.