oscp-pentestcheatsheet-terminal

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs substituting and copying variables (including PASS, hashes, and other credentials) directly into commands and shows plaintext credential examples/history—meaning an agent would need to handle and could output secret values verbatim, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document is a high-risk offensive pentest cheatsheet: it explicitly contains commands and workflows for reverse shells, payload generation, DCSync/secretsdump, credential theft, lateral movement and other remote-code-execution/data-exfiltration techniques, but the skill itself appears to be a local, non-obfuscated reference file with no hidden backdoor or covert network telemetry built into the content.