2fa-bypass

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly requires capturing, logging, and returning credentials/tokens and using verbatim session cookies or OTP/backup code values in requests and evidence (e.g., "New credentials or tokens found", "session=POST_LOGIN_SESSION", saving ssrf-aws-creds.json), which forces the LLM to handle and output secrets directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document provides explicit, actionable instructions to bypass two-factor authentication and achieve unauthorized account access (response manipulation, OTP/backup-code brute-force with rate-limit bypass, session fixation, CSRF to disable 2FA, OAuth/password-reset bypasses, race conditions, and headers/IP spoofing), which are clearly high-risk and can be directly abused for account takeover.