hunt-rce

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs include attacker-controlled hosts serving executable artifacts (.jar, .sh), DTDs for XXE, and malformed/obfuscated attacker endpoints—all high-risk indicators for malware distribution or exploitation.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable exploitation instructions (RCE payloads, reverse-shell/cron backdoor recipes, dependency-confusion postinstall callbacks, credential/file exfiltration methods) that enable unauthorized compromise and data theft.