hunt-nextjs

SUSPICIOUS/HIGH-RISK skill. Its behavior is internally consistent with a red-team Next.js hunting purpose, so it is not deceptive malware, but it gives an AI agent offensive security capabilities against external targets and explicitly uses OOB exfiltration/callback infrastructure. Low supply-chain risk, high operational misuse risk.