hunt-nodejs

SUSPICIOUS: the skill is internally consistent as a red-team Node.js hunting guide, but it equips an AI agent with active exploitation, exfiltration testing, and OOB callback workflows. Supply-chain risk is low, but the offensive security and data-exfiltration footprint make the skill high risk overall.