pentest-output-standards

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). High risk: the document explicitly documents and tracks offensive actions (webshells, creating accounts, persistence, backup-less retention, AD attacks like DCSync/RBCD/影子凭据), indicating intentional backdoor/persistence and credential-theft capabilities.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs the agent to perform and log "write-type" changes including "webshell/新建账户/改配置/持久化/权限改动", which directly encourages creating accounts and modifying system configuration/persistent state on the host.