hunt-cors

This is a coherent red-team skill, not a disguised credential harvester, but it is high risk because it gives an AI agent offensive security capability to probe live targets, use session cookies, validate browser-readable data theft, and optionally exfiltrate proof to OAST endpoints. Install trust is moderate rather than critical; the main concern is the exploit-focused data flows and agent-enabled security testing.