ldap-injection

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs extracting, printing, saving, and returning plaintext credentials and tokens (e.g., userPassword, passwords, "New credentials or tokens found") and includes code that outputs these secrets verbatim, forcing the LLM to handle and emit secret values.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This guide contains explicit, operational exploitation techniques (including payloads and an automated blind-extraction script) to bypass authentication and extract sensitive LDAP attributes such as userPassword, representing clear data exfiltration and credential-theft capability.