offensive-osint

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are benign OSINT/tooling references, but several template cloud-storage and realtime-DB/SharePoint endpoints (S3/GCS/Azure Blob/Firebase/SharePoint placeholders) are high‑risk distribution vectors because they can host arbitrary files (including executables) and are commonly abused to deliver malware.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill is explicitly offensive and contains multiple actionable, high-risk instructions for credential validation, remote code execution, and data-exfiltration (e.g., Redis/Docker/kubelet abuse, secret validation, unauthenticated infostealer API access), making it dangerous for malicious misuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In runtime, the skill’s “post discovery workflow” reads outsider-authored free text from public web pages and APIs (e.g., Stack Exchange code blocks via https://api.stackexchange.com/2.3/search/advanced?...&filter=withbody, Postman public workspace content via https://www.postman.com/_api/collection/$COL_ID, and HackerOne disclosed reports), then runs its secret/pattern regexes and parsing over the retrieved text.