http-smuggling

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repository https://github.com/defparam/smuggler is an exploit tool being distributed via a third‑party account (risky to clone/run), while the target.com/api.target.com URLs are benign target endpoints mentioned in the document.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable offensive instructions, payloads, and tooling to exploit HTTP request smuggling for auth bypass, session hijacking, credential theft, and cache poisoning — clearly malicious guidance.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs to git clone and run https://github.com/defparam/smuggler during runtime (git clone https://github.com/defparam/smuggler and python3 smuggler.py), which fetches remote code that is then executed and is presented as a required detection tool.