password-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs cracking hashes, testing master passwords, credential stuffing and producing "hash analysis" and "weak password findings", which requires the agent to handle and output recovered plaintext credentials (secrets) verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document explicitly describes offensive actions—hash cracking, credential stuffing, rainbow tables, brute-force attacks, and MFA bypass testing—indicating intent to enable credential theft and account takeover.