pentestops-dashboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow includes importing scanner output (e.g., Nmap XML via /api/findings/import/nmap), where the uploaded XML is parsed into free-text fields like description/title and then stored/returned to the app/LLM context (indirect prompt injection via attacker-controlled scanner output).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The README instructs to git clone and run code from the external repository https://github.com/0xBugatti/PentestOPS.git (git clone + npm install + npm run dev), which fetches remote source code that will be executed as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill includes deployment and administration instructions that involve creating/editing system configuration files (e.g., /etc/nginx/sites-available), placing scripts under /opt, and running docker/backup commands that modify host state and typically require elevated privileges, so it pushes actions that can change the machine state.