email-security-auditor-cpp

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill explicitly reads plaintext email:password pairs and writes them verbatim to output files (and shows examples logging credentials), which would require an agent to handle and potentially output secret credentials verbatim — an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The GitHub URLs point to an untrusted/personal account that publishes releases (including a Windows .exe installer) and the repo, combined with a short domain (ara.so) that doesn't vouch for the code — distributing executables from an unknown GitHub release/personal repo is a common malware vector and therefore high risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The code implements bulk credential stuffing and harvesting (saving valid credentials to files), includes evasion/enabling features (proxy support, proxy rotation guidance, disabling SSL verification, high concurrency/rate control), and thus provides clear, intentional capabilities for unauthorized credential theft and abuse.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)