file-upload-bypass

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to "leverage existing credentials" from state, to call get_state_summary(), and to include "new credentials or tokens found" in its return summary and saved evidence (e.g., ssrf-aws-creds.json), which requires reading and outputting secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This is a high-risk offensive guide: it explicitly details techniques to achieve remote code execution and persistent backdoors (webshells, .htaccess/web.config tricks, uWSGI exec), file-write and archive-extraction abuses (ZIP null-byte and header-mismatch, path traversal, NTFS ADS), and data/credential exfiltration vectors (SSRF to metadata, arbitrary file reads), indicating clear malicious intent if used beyond authorized penetration testing.