tunneling-and-pivoting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill contains multiple command examples that embed plaintext credentials or shared secrets (e.g., -pw password, -P password, -k PASSWORD, --secret=SHARED_SECRET, -p pass), which would require the model to output secret values verbatim if populated, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, operational playbook for establishing covert tunnels, reverse proxies, web shells, and pivot chains to access and exfiltrate internal networks—intentionally malicious and enabling remote backdoors and data theft.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly instructs the agent to run privileged commands and modify system/network state (sudo ip tuntap, ip route add, sysctl, editing /etc/proxychains4.conf, etc.), which requires elevated privileges and changes the host machine configuration.