hunt-xss

SUSPICIOUS: the skill is internally consistent as an XSS hunting guide, but it gives an AI agent explicit offensive security capabilities against arbitrary targets, including OOB validation and exploit chaining. No installer, credential harvesting of the user, or hidden execution is present, so this is high-risk security tooling rather than confirmed malware.