This skill is dangerous as it can download and execute
Claims to do
RequestHunt Skill: Generate user demand research reports by collecting and analyzing real user feedback from Reddit, X (Twitter), and GitHub.
Actually does
The skill installs the `requesthunt` CLI from `https://requesthunt.com/cli`, authenticates via `https://requesthunt.com/device` or a manual API key, and then uses the CLI to initiate data scraping jobs from Reddit, X, and GitHub via `requesthunt.com`. It also allows searching and listing this collected user feedback.
Remote code download and execution detected
curl -fsSL https://requesthunt.com/cli | sh
The skill explicitly mentions setting an API key for authentication, indicating that the agent will handle sensitive credentials which require secure management to prevent exposure.
requesthunt config set-key rh_live_your_key
The skill claims to 'generate user demand research reports' but only provides a markdown template and the tools to collect data. The actual report generation and content population are left to the user/agent.
Claimed purpose: 'Generate user demand research reports'. Actual behavior: The 'Generate Report' section provides a markdown template to be filled in, implying manual or agent-driven population, not automated generation by the skill itself.
[](https://mondoo.com/ai-agent-security/skills/github/resciencelab/opc-skills/requesthunt)<a href="https://mondoo.com/ai-agent-security/skills/github/resciencelab/opc-skills/requesthunt"><img src="https://mondoo.com/ai-agent-security/api/badge/github/resciencelab/opc-skills/requesthunt.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/resciencelab/opc-skills/requesthunt.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.