ctf-web

SUSPICIOUS/HIGH-RISK skill. The content is internally consistent with a CTF exploitation purpose and does not show covert malware behavior, but it equips an AI agent with offensive security techniques, exfiltration examples, and Web3 transaction actions that are disproportionate for general use and high risk if misapplied outside intended CTF environments.

The fragment is an explicit exploit demonstration targeting a hypothetical vulnerable service. It attempts prototype pollution followed by VM escape and remote command execution to read a flag file. It is not evidence that an npm package contains malware, and the claimed exploit chain cannot be confirmed without the target application and dependency versions. Do not run it against systems without authorization.