iot-camera-recon

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly extracts and prints sensitive parameters (passwords/tokens/keys) and embeds credentials verbatim in requests/URLs (curl -u and rtsp://user:pass@...), requiring the LLM to handle and output secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill is an explicit offensive reconnaissance and exploitation guide that instructs mass scanning of networks, targeted discovery of cameras (including government/security targets), credential brute-forcing, and exfiltration of snapshots, config files, and live streams — behavior consistent with intentional malicious activity.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow performs mass scanning and then probes attacker-influencable network targets with curl (and parses HTTP response bodies such as the Axis param.cgi?action=list output and ONVIF SOAP responses), which means outsider-authored text can be ingested from those endpoints without any preselection by a specific item.