nosql-injection

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs extraction, logging, and reporting of credentials/tokens (e.g., saving evidence like ssrf-aws-creds.json and including "New credentials or tokens found" in the return summary), which requires the agent to handle and output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, actionable offensive playbook for exploiting NoSQL injection—providing techniques for authentication bypass, blind data exfiltration (credential theft), and server-side/OS command execution (RCE), and thus has high potential for malicious abuse.