account-warming-automation

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill provides step-by-step operational guidance to evade social-platform detection and run large-scale sockpuppet/account-farming campaigns (sticky residential proxies per account, human-like timing, staggered batch warming, replacing flagged accounts), so while it contains no evident code-level backdoors, exfiltration, or credential-theft mechanisms, its intent and practices are clearly malicious and high-risk for abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the automation to browse and read user-generated content on public social platforms (e.g., "Browse feed", "Read posts and comments in target subreddits", Instagram/TikTok/Twitter directives), so the agent would ingest untrusted third-party content that could influence subsequent actions.