fastapi-security

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The list contains explicit malicious placeholder domains (https://evil.com, https://malicious.com) and internal addresses (http://169.254.169.254/... , http://localhost:8080, http://127.0.0.1:6379) that are commonly abused for malware delivery, phishing, or SSRF-based credential/exfiltration, so the collection should be treated as suspicious.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill explicitly instructs offensive actions (SSRF to cloud metadata, exfiltration checks, SSTI, mass-assignment privilege escalation) and even mandates executing payloads without further authorization, enabling deliberate malicious abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow ingests only first-party, target-controlled HTTP content from the explicitly contacted FastAPI endpoints (/docs, /redoc, /openapi.json, and specific target paths via curl/ffuf/nuclei), not arbitrary outsider-authored free text pushed into a queue/feed the workflow automatically reads.