Burp Suite Web Application Testing

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document provides explicit, actionable instructions for intercepting/modifying traffic and conducting offensive attacks (SQL injection, command injection, credential brute-force, price manipulation and file disclosure), which enable deliberate exploitation and data theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md instructs using Burp’s proxy/browser to browse a runtime-provided “Target web application URL” and then read captured request/response content in “Proxy > Intercept” / “Proxy > HTTP history” / “Dashboard > Issues,” which can include outsider-authored free text from the target site that may be ingested into the agent’s LLM context if the agent summarizes/extracts that content.