analyze

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly tells the agent to "read key files" and to produce "exact request" proof-paths and the "exact first test" (including account pairs/endpoints), which encourages embedding any discovered API keys, tokens, or passwords verbatim into generated commands/requests, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill is an explicit offensive playbook: it operationalizes reconnaissance into prioritized attack paths (IDOR, SSRF to cloud metadata, auth bypasses), prescribes exact commands and proof steps to steal PII/financial data and harvest credentials, and therefore is deliberately malicious and designed to enable data exfiltration and system compromise.