hunt-dom

SUSPICIOUS/HIGH-RISK skill. Its footprint matches its stated red-team purpose, so it is internally coherent, but that purpose is to perform offensive security testing and browser-side data exfiltration. The strongest concerns are explicit exploit guidance, named OOB exfiltration services, and PoCs that capture tokens/auth headers from victim contexts. This is not confirmed malware, but it is a high-risk offensive skill unsuitable for general agent use.