hunt-csrf

SUSPICIOUS/HIGH-RISK skill. It is internally consistent as a CSRF hunting guide and shows no malware-like installer, exfiltration, or hidden execution, but it equips an AI agent with offensive security techniques for arbitrary external targets. Main concern is exploit capability and use of authenticated session material, not supply-chain abuse or covert credential theft.