web2-recon

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This guide contains explicit, actionable instructions to locate and extract sensitive secrets and source code (git dumps, .env/config reads, JS secret scanning) and describes techniques that can enable remote code execution and ongoing monitoring, which are high-risk for abuse if used without authorization.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow is an external recon pipeline that ingests only provider- or target-authored web content via explicit command-line fetches (e.g., crt.sh JSON, ChaosDNS API, waybackurls/gau outputs, and many curl/LinkFinder/SecretFinder downloads) after selecting a target, so outsider text is not ingested by an agent “without selecting a specific item.”