drm-pentesting-toolkit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill's examples explicitly read credentials and DRM keys and insert them verbatim into HTTP headers, logs, and command-line arguments (e.g., Authorization: Bearer {api_key}, X-Password, logging keys, and --key CLI args), which requires the agent to handle secret values directly and creates a high exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The set includes an unknown GitHub repo (fairy-root/drm-pentesting-toolkit) that instructs users to download and run third‑party executables and device files (a common malware vector), contains malformed/placeholder URLs (http://{parts) and unspecified license/download endpoints — together these are high‑risk indicators for suspicious or malicious distribution.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This toolkit is explicitly designed to extract DRM license keys and includes features to expose credentials to plugins, make arbitrary network requests, and execute plugin code and external subprocesses—enabling deliberate data exfiltration, credential theft, and remote code execution when misused.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes fetching an MPD manifest from a user-supplied mpd_url at runtime (public/outsider web content) and ingesting its readable text via response.text in the 2_parse_pssh-style plugin, which is then processed by the agent/LLM context (indirect prompt injection risk through attacker-controlled MPD content).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The installation instructs to git clone and then run the repository (git clone https://github.com/fairy-root/drm-pentesting-toolkit.git followed by running python main.py), which fetches remote code that will be executed locally, so it is a runtime external dependency that executes remote code.