clickjacking-hunter

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content provides explicit, actionable instructions and code to perform clickjacking attacks (single- and multi-click PoCs), bypass frame-busting protections, and directly trick users into granting OAuth tokens or performing sensitive actions — enabling unauthorized account takeover and credential/exposure theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow (scripts/clickjacking_agent.py) fetches and inspects first-party HTML/headers from a user-supplied target_url and paths via requests.get(), so outsider-authored free text can be ingested when an outsider controls the target content.