claude-pentest-framework

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt contains examples and workflows that request and record plaintext credentials (e.g., "auth": "username: jsmith, password: demo1234" in .pentest-scope.json and scope entry prompts) and instruct writing them into files/commands, which would require the LLM to handle or emit secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The set includes potentially risky sources — notably the local Kali server API endpoints (http://192.168.1.10:5000 and its /nmap, /sqlmap, /health paths) which can serve or execute tooling and an unknown GitHub repo (github.com/Wh0am123/MCP-Kali-Server) that could host unvetted binaries or scripts — while the remaining example/demo/API/app domains are generally low-risk placeholders or legitimate targets for testing.