subdomain-takeover-hunt

SUSPICIOUS: the skill is internally coherent for subdomain takeover hunting, but it equips an AI agent with offensive reconnaissance capability and depends partly on less-verifiable third-party security tooling. No clear credential theft or malware behavior is present, yet the combination of autonomous recon instructions and external CLI trust makes it a medium-high security risk.