security-bounty-hunter

SUSPICIOUS. The skill is internally coherent and does not show credential theft, malicious data routing, or supply-chain abuse, but it explicitly equips an AI agent to perform offensive vulnerability hunting and exploitability assessment on repositories. That offensive-security purpose makes the skill high risk even though the implementation footprint shown here is otherwise restrained.