hunt-spa-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs harvesting "Secrets" from JS bundles (grep patterns for API keys, JWTs, sk_live_, AIza, etc.), which requires the agent to read and potentially output secret values verbatim, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill is a highly actionable offensive playbook that harvests embedded API hosts and secrets from SPA bundles and instructs unauthenticated probing of discovered endpoints (including pivoting to dev/staging), enabling credential theft and data exfiltration if abused.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill ingests outsider-authored free text at runtime by downloading and then grepping the target’s public SPA JavaScript bundles (via curl of /static/js/*.js / /_next/static/*) to extract hosts/routes/secrets, which can include attacker-controlled content if the provider user is not trusted.