hunt-websocket

SUSPICIOUS: the skill is internally coherent as a red-team WebSocket hunting guide, and its installs are mostly from standard sources, but it gives an AI agent offensive security capabilities, routes proof data to external OAST services, and forwards session cookies to third-party CLIs. This is not confirmed malware, but it is high-risk agent functionality.