hunt-nestjs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes example curl commands that pass an Authorization: Bearer TOKEN header (and looks for fields like password/secretKey), which encourages substituting real tokens/secret values directly into command-line requests and thus requires the LLM/agent to handle or emit secrets verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit offensive playbook for abusing NestJS apps — it gives step‑by‑step instructions to bypass authentication, escalate privileges, and exfiltrate sensitive fields (passwords, tokens, internal notes) and to reach unauthenticated microservice handlers.