security-arsenal

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include multiple attacker-controlled domains, OAST/callback hosts, and typosquatted forms (attacker.com, attacker.burpcollaborator.net, evil.com, target.com.evil.com, etc.) that are common vectors for hosting malware, exfiltration, or tricking victims into executing malicious payloads, so they are suspicious.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The repository contains explicit offensive payloads and step-by-step instructions for data exfiltration, credential theft, remote code execution, and deploying webshells — content that enables deliberate malicious abuse.