hunt-xss

SUSPICIOUS/HIGH-RISK skill. It is internally consistent as a red-team XSS hunting guide, but its actual footprint is offensive: it enables exploitation on arbitrary targets, includes exfiltration-oriented XSS chains, and leverages external OAST callbacks. No strong malware or supply-chain evidence appears, yet the security risk remains high because this is an exploit capability for an AI agent rather than a benign developer utility.