nextjs-attack-probe

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an offensive probing checklist that explicitly instructs how to discover and exploit Next.js weaknesses (client-baked secrets, server-action replay, middleware bypass, SSRF to metadata, unauthenticated mutating APIs, etc.), enabling credential exfiltration and remote state changes — high-risk dual-use attack tooling.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow explicitly fetches and ingests outsider-authored free text from the target app’s public web assets—e.g., it performs GET /_next/static/chunks/*.js and app/page-*.js and then greps those shipped JS for NEXT_PUBLIC_*, which is LLM-readable content originating from the app’s deployed build (not authored by the operating user in this interaction).