path-traversal-lfi

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive playbook detailing step-by-step LFI/traversal exploitation, credential and file exfiltration, log poisoning to gain remote code execution, and hosting/injecting remote shells — clearly intended for malicious abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs remote file inclusion of attacker-hosted payloads (e.g., http://attacker.com/shell.txt, ftp://attacker.com/shell.php, http://attacker.com/shell.php, http://attacker.com/shell.tgz, http://attacker.com/evil.tgz) which are fetched at runtime and execute remote code on the target, so these external URLs are runtime dependencies that enable code execution.