hunt-nextjs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's examples require embedding sensitive values verbatim into curl commands/headers (e.g., action IDs, session cookies, and "secret" query params), which would force an LLM to handle/output actual secrets in generated commands.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an offensive playbook with step-by-step exploit instructions (SSRF, Server Actions auth bypass, IDOR, env-var/HTML exfiltration, ISR poisoning) intended to obtain sensitive data and privileged access.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow is an attacker-oriented set of curl/grep commands that only ingests first-party, attacker-chosen HTTP responses from the target (e.g., /$TARGET/, /_next/* JSON/HTML/JS) rather than any outsider-authored free text being posted into a queue/feed that the agent passively monitors before selecting a specific item.