hunt-lfi

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to read and "report exactly what you recovered" from sensitive files (e.g., .env, ~/.aws/credentials, private keys) and to show real file contents as proof, which requires outputting secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Several URLs point to attacker-controlled "OOB" remote shell locations (http(s)://OOB-HOST/... and http://OOB/...) which are classic Remote File Inclusion (RFI) vectors used to host/execute remote PHP shells and thus represent high-risk download/execution sources.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is explicit offensive guidance for exploiting LFI/RFI and path traversal to read sensitive files, exfiltrate credentials, and achieve remote code execution (RCE), i.e., it directly enables malicious activity.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs operators to run a remote repository at runtime ("git clone https://github.com/synacktiv/php_filter_chain_generator" then "python3 php_filter_chain_generator.py"), which fetches and executes external code used to generate exploit payloads, so this external URL is a runtime-executed dependency.