hunt-csrf

SUSPICIOUS: the skill is internally consistent as an offensive CSRF hunting guide, but that purpose itself gives an AI agent exploit-oriented capabilities against live targets. No malware, exfiltration service, or supply-chain abuse is evident; the main risk is enabling autonomous security testing and state-changing exploit attempts.