hunt-llm-ai

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains explicit templates and examples that instruct an agent to insert user secrets (API keys, emails, tokens) verbatim into image URLs, fetch/tool calls, or OOB callbacks, which requires the LLM to output secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable instructions and payloads for data exfiltration, SSRF/metadata theft, covert instruction-smuggling, and code-backdoor techniques that can be directly abused to steal credentials and enable remote compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill document describes indirect-injection channels (e.g., “a web page the summarize this URL feature fetches” and “an email/calendar invite/Jira ticket/PR description an agentic assistant processes”) that would require the runtime workflow to ingest outsider-authored free text via those monitored inputs, creating a reachable injection surface.