hunt-api-misconfig

SUSPICIOUS: the skill is internally consistent with its red-team purpose and has low installer/credential risk, but it gives an AI agent high-risk offensive security capabilities against arbitrary external APIs. This is not confirmed malware, yet it materially expands attack surface and should be treated as a high-risk penetration-testing skill.