m365-entra-attack

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes code and report templates that require embedding and recording full passwords/tokens (e.g., the ROPC POST body with "password", Playwright filling the password, cookie capture, and an explicit finding template showing ":"), which forces handling and likely output of secrets verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This is an offensive playbook that explicitly instructs and automates credential-theft and account-takeover techniques (credential spraying, user enumeration, use of stealer-leaked creds, token/cookie capture, and detection-evasion), enabling deliberate unauthorized access and session/token exfiltration.