hunt-file-upload

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The list contains an exploit PoC GitHub repository from an untrusted username and multiple attacker-controlled "COLLAB_HOST" endpoints (ffmpeg-/imagemagick-ssrf, chrome-rce) used to host/exfiltrate payloads and therefore represent high-risk sources for delivering exploits or malware.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable exploit instructions (SSRF to cloud metadata, RCE upload chains, XSS payloads, archive/zip-slip and symlink attacks, and exfiltration via remote fetch), indicating deliberate malicious intent and high abuse risk.