lfi

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill explicitly directs the agent to read sensitive files and report/save "new credentials or tokens found" (and file evidence like "ssrf-aws-creds.json"), which requires including secret values verbatim in outputs — a direct secret-exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Yes — the set includes an attacker-controlled payload URL (http://ATTACKER/shell.txt), explicit LFI/RFI exploit endpoints and traversal attempts on TARGET (including /proc/self/environ), plus an exploit toolkit repo (synacktiv/php_filter_chain_generator), which together indicate a high-risk malicious distribution/remote‑code execution workflow.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, step‑by‑step offensive guide that teaches reading sensitive files, exfiltrating credentials, achieving remote code execution (via php://, data://, RFI, log poisoning, PHAR/ZIP tricks), and writing/triggering webshells—behaviors that directly enable backdoors, credential theft, and system compromise.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and running remote code at runtime via "git clone https://github.com/synacktiv/php_filter_chain_generator" followed by "python3 php_filter_chain_generator.py", so this external repository is a runtime dependency that downloads and executes remote code.