recon-gyms

SUSPICIOUS/HIGH-RISK skill. Its footprint is coherent with its stated purpose, but that purpose is to equip an AI agent with offensive security recon and exploitation guidance against gym websites, including auth bypass, IDOR, and payment/webhook abuse. There is little supply-chain risk, but the exploit-focused capability and disabled TLS verification make the overall security risk high.