csrf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly shows and instructs embedding session cookies, credentials, and CSRF tokens into curl commands and PoC HTML (e.g., Cookie: session=VALID, attacker password in forms) and asks to capture/save tokens and credentials, which requires the agent to handle and potentially output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit CSRF exploitation guide containing step-by-step attack techniques (auto-submitting PoC pages, file upload of a PHP webshell, WebSocket hijacking with exfiltration to an attacker server, login CSRF to capture user data, CRLF cookie injection, and other bypasses) that enable credential theft, remote code execution/backdoors, and data exfiltration if misused.