certipy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs replacing placeholders with real credentials and shows commands that embed passwords/keys (e.g., -p '', -pfx administrator.pfx) which requires the model to handle and output secret values verbatim, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document contains explicit, actionable instructions for abusing AD CS (requesting certs for other UPNs and "shadow credentials" attacks) that enable credential theft and privilege escalation, making it high-risk if used outside an authorized testing context.