express-attack-probe

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to capture and reuse sensitive tokens (e.g., connect.sid cookie, Authorization Bearer/JWT values) and to include them verbatim in subsequent requests, which requires the LLM to handle and emit secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document explicitly contains actionable exploit instructions (prototype pollution, path traversal to retrieve .env/package.json, JWT alg=none/HS256 bypass, X-Forwarded-For spoofing to defeat rate limits, routes-order auth bypass, qs depth bombs, etc.) that enable data exfiltration, privilege escalation and auth bypass — intended for authorized testing but clearly high-risk if misused.