api-noauth-hunt

SUSPICIOUS: the skill is coherent and not overtly malicious, but it is a high-risk offensive security skill that enables AI-driven reconnaissance and unauthenticated API testing against live targets. No credential harvesting or third-party exfiltration is present, yet remote scanning, optional state-changing validation, and disabled TLS verification make the overall security risk high.