dns-rebinding-attacks

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The playbook's code and guidance explicitly read sensitive secrets (cloud metadata, cookies/credentials) into variables and exfiltrate them verbatim (e.g., navigator.sendBeacon with JSON.stringify(creds)), meaning an agent following this skill would be instructed to include secret values directly in outputs/requests.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). These URLs are attacker-controlled endpoints (attacker.com / exfil.attacker.com) used in the skill to access cloud metadata, internal admin APIs, callbacks and exfiltration endpoints—classic malicious DNS-rebinding/SSRF infrastructure.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, high-confidence malicious attack playbook describing DNS rebinding techniques, payloads, tooling, and step-by-step exfiltration methods intended to access and steal internal/cloud credentials and achieve remote compromise.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an explicit runtime setup that fetches and builds remote code via "git clone https://github.com/nccgroup/singularity", which causes execution of external code during skill operation.