http2-specific-attacks

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes an example that embeds an Authorization bearer token directly on the command line (-H "Authorization: Bearer token123"), which is an insecure pattern that requires including secret values verbatim in commands / outputs and risks exfiltration.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This file is an explicit offensive playbook describing and demonstrating HTTP/2 attack techniques (h2c smuggling, pseudo-header injection, HPACK oracles, single-packet races, RST_STREAM floods, server-push cache poisoning) and tooling to bypass proxies, authentication, and cause DoS—clearly intended for unauthorized abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime install/run instructions that git clone and execute code from https://github.com/BishopFox/h2csmuggler (see the "git clone" + subsequent python invocation), meaning remote code is fetched and executed during use.