hunt-oauth

The skill is internally consistent with its stated red-team purpose, but that purpose is high risk: it equips an AI agent to perform offensive OAuth security testing and exploit validation against arbitrary targets. There is little evidence of hidden malware or credential exfiltration by the skill itself, yet its operational footprint is dangerous because it combines external-target analysis, command execution, and exploit guidance for account takeover scenarios.