smb-exploitation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires returning "new credentials or tokens found" and saving evidence files (e.g., ssrf-aws-creds.json), which forces the agent to include secret values verbatim in its outputs/evidence.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is high-risk: it contains explicit, step-by-step instructions and artifacts to achieve remote code execution (multiple SMB exploits), generate and deliver reversible shells/payloads (msfconsole, msfvenom, staged/unstaged payloads), and directs post-exploitation actions including credential-dumping and lateral movement — all patterns that facilitate backdoors, RCE, credential theft, and data exfiltration.