supply-chain-attack-recon

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Most links are benign references to advisories, registries and vendor blogs, but https://codecov.io/bash is a known compromised remote-install script (curl|bash) that was used to exfiltrate data and can be used to distribute malware.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an offensive supply-chain recon/playbook that gives step-by-step methods to discover internal package names, craft typosquats/dependency-confusion candidates, identify CI workflow injection vectors, and exfiltrate credentials—enabling deliberate credential theft, remote code execution, and downstream compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Step 6 reads arbitrary free text from outsiders-authored GitHub workflow YAML files by fetching every .github/workflows/*.yml in public repos (via gh api .../contents/... and base64-decoding it into content).