hunt-brute-force

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill repeatedly instructs embedding sensitive values (OTP, session cookies, reset/session tokens) verbatim into curl/ffuf commands and test scripts, which requires the LLM or operator to handle and output secret values directly (high exfiltration risk).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, practical how‑to for performing brute‑force, rate‑limit bypass, credential‑stuffing, enumeration, and MFA/OTP abuse (including evasion techniques and automation), which demonstrates clear malicious intent and high abuse potential.