wordpress-plugin-hunt

SUSPICIOUS/HIGH-RISK skill. Its footprint is coherent with its stated purpose, but that purpose is offensive exploitation: it equips an AI agent to scan external WordPress targets, identify vulnerable plugins, and attempt CVE-based compromise. No strong malware or credential-theft evidence appears, yet the exploit focus, transitive offensive skill chaining, and disabled TLS checks make it unsafe.