hunt-idor

SUSPICIOUS. The skill is internally consistent as a red-team/offensive testing playbook, with low supply-chain concern, but it gives an AI agent high-risk exploit-hunting and exploitation guidance against arbitrary targets, including credentialed requests, destructive actions, and data-exfil/ATO chains. This makes it a high security-risk skill even without evidence of hidden malware.