xslt-injection

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable instructions and payloads for data exfiltration (XXE/SSRF), arbitrary file writes (EXSLT/webshells), and remote code execution (PHP/Java/.NET), enabling deliberate exploitation and backdoor installation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit payloads that read and write local files and execute system commands (document('/etc/passwd'), EXSLT file writes, php file_put_contents/webshell, Java Runtime.exec, msxsl script), which directly modify or execute on the host and can compromise machine state.