recon-and-enumeration
Fail
Audited by Snyk on Jun 20, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This document is an offensive reconnaissance playbook with explicit stealth/evasion techniques, systematic instructions to discover and harvest sensitive files, credentials, and API secrets, and direct guidance to feed findings into exploitation workflows — representing clear malicious/abusive intent if used outside an authorized engagement.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow ingests outsider-authored free text from public web content (e.g.,
curlresponses fromcrt.shandweb.archive.organd their JSON bodies piped intojq, plus any fetched web pages/bundles viacurl/httpx/nuclei), which then becomes readable prose/JSON in the agent context via the produced recon outputs.
Issues (2)
E006
CRITICALMalicious code pattern detected in skill scripts.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata