hunt-http-smuggling

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive guide for HTTP request smuggling, containing concrete payloads, scripts, and tool usage that enable credential theft, cache poisoning, session hijacking, and browser-mediated exploitation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime installation and execution of third-party tools via git clone (fetching and running remote code) from https://github.com/defparam/smuggler.git and https://github.com/assetnote/h2csmuggler.git, so these URLs provide code that would be executed during skill use.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs installing tools by cloning into /tools and running pip installs (e.g., git clone to /tools/smuggler and pip install -r requirements.txt), which implies modifying system-level directories and possibly global Python packages without isolating privileges — a moderate risk to the host state even though it doesn't explicitly request sudo or create users.