recon-osint

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document is a clear, step-by-step reconnaissance and attack playbook (OSINT, active scanning, credential harvesting, cloud enumeration, exploit discovery and “priority targets for exploitation”), indicating intentional malicious intent to identify and prepare targets for exploitation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow performs external OSINT lookups and scraping via user-provided targets/domains (e.g., it curls certificate-transparency results from crt.sh, Wayback URLs, NVD CVE JSON, and GitHub repository search responses), which are outsider-authored free text returned in API responses or page data.