active-directory-certificate-services

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains many example commands that embed plaintext passwords and PFX/passphrase values (e.g., -p password, -w password, --CaCertPassword "pass"), which requires inserting or echoing secret values verbatim and therefore risks secret exfiltration.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is an explicit offensive AD CS attack playbook providing step-by-step commands to obtain and misuse certificates, coerce/relay authentication, modify templates, extract CA keys, and forge/administer domain credentials — clearly intended for malicious abuse.