Ethical Hacking Methodology

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill embeds plaintext credentials in example commands (e.g., omp -u admin -w password), which requires including secret values verbatim in generated commands or guidance and therefore poses an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable instructions for exploitation and maintaining unauthorized access (reverse shells, Meterpreter persistence, SSH key/cron backdoors, and brute-force credential attacks) that can be readily abused for malicious compromise.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs actions that modify system state and require elevated privileges—writing raw disks (dd), partitioning/installing GRUB, adding cron entries to /etc/crontab, and adding SSH keys or meterpreter persistence—so it pushes the agent to compromise the machine state.