ssti

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The domain http://your-interactsh.oast.fun/ is suspicious — it is an attacker-controlled OOB/callback server used for exfiltration in the SSTI payloads; the other links are example target endpoints or a GitHub code repo (not a direct malware download host).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document is an explicit exploitation guide: it contains ready-to-run SSTI payloads for remote code execution, data exfiltration (including env/secret leakage), shell access, persistence, and evasion techniques — clearly malicious intent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to "git clone https://github.com/epinna/tplmap" and run the fetched tool (python tplmap.py), which fetches and executes remote code (https://github.com/epinna/tplmap) as part of the workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill contains explicit, actionable RCE exploitation payloads (e.g. Jinja2/Twig/Freemarker chains), commands to spawn interactive shells (tplmap --os-shell/--bind-shell, popen/exec usage), OOB/curl and persistence suggestions, which directly enable compromising and modifying the state of the target/host machine.