recon-salons

SUSPICIOUS: the skill is internally consistent as a recon guide, but its actual purpose is offensive security testing against live salon booking systems and third-party APIs, including IDOR and PII exposure checks. No malware or credential theft is evident, and there are no supply-chain installs, but the exploit-oriented scope plus disabled TLS verification make it a high-risk AI agent skill.