hunt-csrf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes concrete PoC and curl examples that capture and then embed session cookies, OAuth tokens, and CSRF tokens verbatim into HTTP requests and commands, which requires handling secret values directly and risks exfiltration.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable exploitation techniques and PoC artifacts for CSRF that enable account takeover and other attacker-controlled state changes, making it high-risk dual-use content that can be used for malicious abuse.