staging-subdomain-hunt

SUSPICIOUS/HIGH-RISK skill. Its capabilities align with its stated purpose, but that purpose is offensive security reconnaissance and exploitation guidance for AI agents, including staging takeover and exposed-secret discovery. No strong evidence of malware or credential exfiltration to third-party infrastructure, but the skill materially increases attack capability and uses weakened TLS checks during probing.