SSH Penetration Testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes commands and code that explicitly read, print, or embed plaintext credentials and keys (e.g., printing "username:password", echoing an SSH key string, curl fetching id_rsa, example plaintext passwords), which requires the model to handle/output secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs are highly suspicious because three point to exposed SSH private keys or an archive likely containing keys on an external host (target.com/id_rsa, target.com/.ssh/id_rsa, target.com/backup/ssh_keys.tar.gz), which represents a critical credential-exposure/compromise risk (localhost:8080 is local and not an external download).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content contains explicit, actionable instructions for brute-forcing credentials, harvesting/exfiltrating keys and histories, establishing reverse shells and SSH tunnels for pivoting, and adding persistent backdoor keys—clear patterns of deliberate malicious behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs fetching and interpreting content from arbitrary public targets — e.g., Phase 5's "curl -s http://target.com/.ssh/id_rsa" and Phase 2 banner-grabbing (nc/telnet, nmap -sV) — which causes the agent/operator to ingest untrusted third-party web/host content that can materially influence subsequent actions.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill contains explicit, actionable instructions to modify system files and persist access (for example appending to /etc/proxychains.conf and adding keys to ~/.ssh/authorized_keys), perform post‑exploitation and reverse shells, and run brute‑force/exploit workflows that can change the machine's state and require elevated privileges.