WordPress Penetration Testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains plaintext passwords and an API token placeholder and instructs embedding them directly into commands (e.g., WPScan API token, Metasploit set PASSWORD, XML-RPC brute payload), which requires the LLM to output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable instructions for unauthorized access and persistence (brute-force credential attacks, exploitation with Metasploit, reverse shells, malicious plugin/webshell creation and upload, and proxy-based evasion), indicating clear malicious intent and backdoor capabilities.