SSH Penetration Testing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow actively connects to user-specified SSH targets and runs searchsploit and curl against them, so outsider-authored text (service banners, target-hosted web files, public exploit records) is reached only when the agent chooses to fetch it, which makes this low exposure.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.55). The skill is a legitimate SSH pentest methodology, but it instructs the agent to append an attacker key to authorized_keys for persistence and to append to the system file /etc/proxychains.conf, both of which modify SSH-related and system state.