AWS Penetration Testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains multiple commands and examples that require embedding AWS access keys, secret keys, session tokens, or CLI flags with secret values verbatim (e.g., --access-key/--secret-key, aws_consoler -a/-s, export AWS_SECRET_ACCESS_KEY), which forces an LLM or operator to handle and output secrets directly, creating a high exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are high-risk because they include AWS instance metadata endpoints, internal API/Gateway SSRF/RCE gadget URLs, and public S3/bucket discovery endpoints which can be abused to exfiltrate credentials or deliver/host malicious payloads.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable instructions for stealing AWS credentials (SSRF/metadata, API calls), backdooring Lambda/containers, establishing persistence, and covering tracks—clear malicious intent if used beyond authorized testing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains explicit git clone instructions that fetch remote code which the skill then runs or instructs the operator to run (e.g., ./enumerate-iam.py and aws_consoler), specifically: https://github.com/andresriancho/enumerate-iam, https://github.com/NetSPI/aws_consoler, https://github.com/RhinoSecurityLabs/pacu, https://github.com/duo-labs/cloudmapper.git, https://github.com/nccgroup/s3_objects_check, and https://github.com/BishopFox/dufflebag.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit sudo commands to create directories and mount attached volumes (e.g., "sudo mkdir /mnt/stolen" and "sudo mount /dev/xvdf1 /mnt/stolen"), which require root privileges and instruct the agent to modify the host machine's filesystem state.