offensive-osint

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes many runnable examples (curl, boto3, headers) that explicitly show inserting API keys/tokens (e.g., sk-..., ghp_..., PMAK-, xoxb-, AKIA...) into commands and validators, which would require an LLM to accept, handle, or emit secret values verbatim for validation—an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Multiple entries are cloud-storage bucket templates, APK repositories, a known malware-sample archive, and a few GitHub repos from low-identity usernames — all common channels attackers use to host or distribute executable malware or trojanized binaries.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is a clearly offensive red-team OSINT playbook that provides step-by-step techniques to discover, validate, and enumerate leaked credentials, perform user enumeration, remotely access services (including instructions to obtain host takeover via services like Redis/Docker), and perform supply‑chain/typosquat attacks — enabling deliberate credential theft, data exfiltration, and remote compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored free text from GitHub by searching for and fetching repository files/fragments (e.g., “Fetch the file… via the GitHub Contents API” for secret scanning) which can include attacker-controlled content.