attacking-grpc-protobuf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows and instructs embedding bearer tokens into command-line headers (e.g., "authorization: Bearer eyJ..." and "authorization: Bearer $LOW_PRIV"), which requires the LLM/agent to handle or emit secret values verbatim, creating exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable instructions for bypassing authentication (metadata header impersonation), injecting privileged fields, enumerating and calling methods with low-privilege tokens, extracting embedded schemas from clients, and intercepting/decoding gRPC traffic — techniques clearly usable for unauthorized access and data abuse.