spring-boot-attack-probe

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive probe guide for exploiting Spring Boot apps and describes multiple high-risk, intentional abuse techniques — actuator/heapdump/env access for data exfiltration, JWT/auth bypasses, mass-assignment to escalate roles, SpEL injection for remote code execution, and CORS/CSRF exploits — all of which enable credential theft, unauthorized access, and RCE.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow probes the target app’s own HTTP endpoints (e.g., GET /actuator/env, /heapdump, /configprops, /mappings, /beans) and ingests the returned response bodies into the agent’s LLM context; these responses are outsider-authored free text because they originate from the probed application/system rather than the operating user’s own authored content.