recon-moving-companies

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is a clearly malicious targeted reconnaissance playbook: it instructs scanning for and harvesting PII (debug logs, CSV/PDF uploads), user enumeration, CORS abuse, XML-RPC amplification/brute-force, and accessing customer portals to enable data exfiltration and credential abuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses runtime curl to fetch outsider-authored free text from arbitrary third-party moving company websites (e.g., wp-content/debug.log, directory listings, REST API responses, and page source), which is then parsed/grepped and could be fed into the agent’s LLM context depending on implementation.