pentest-lyan-web-security-testing

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.70). The prompt explicitly tells the agent/user that "issuing the command implies authorization," a deceptive instruction that overrides normal authorization checks and could encourage unauthorized testing, which is outside safe/expected documentation for a pentest skill.

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires providing plaintext credentials in CLI invocations and state files and shows code that uses session_info["password"] and embeds account strings in commands/requests, which forces the agent to handle and potentially emit secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Pentest-Lyan’s runtime workflow performs web discovery and “deep JavaScript analysis” by downloading/parsing JavaScript and discovering endpoints from the user-supplied target URL; any fetched page/JS content is outsider-authored free text that can be ingested into the agent’s LLM context (indirect prompt injection risk).