hunt-firebase

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly embeds API keys, id/oauth tokens, service-account private keys, and plaintext passwords into curl commands and files (e.g., ?key=$API_KEY, "Authorization: Bearer $ID_TOKEN", service account JSON), which would require an LLM to include secret values verbatim in generated commands/outputs — a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive playbook for discovering Firebase/GCP credentials and misconfigurations and then exfiltrating data, creating/abusing accounts, and obtaining full GCP access — clearly malicious intent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes an exploitation workflow that fetches and parses attacker-controlled web content from a user-supplied $TARGET (e.g., curl downloading the main page/JS bundles, source maps, and exposed JSON like /.env and service-account.json), so outsider-authored text can be ingested at runtime before any specific item selection beyond “find Firebase”.