hunt-api-misconfig

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill is internally consistent with its stated purpose, but that purpose is to enable offensive API exploitation by an AI agent, including auth bypass and privilege escalation techniques. Install trust and data-flow concerns are limited, yet the capability set itself makes the skill high risk.