recon-property-management

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is a malicious reconnaissance playbook focused on locating and extracting tenant PII, payment data, and access codes from property-management sites using targeted probes, CORS/IDOR abuse, and automated data-dump techniques.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required workflow uses runtime HTTP fetching (e.g., curl to crt.sh and to arbitrary target domains’ WordPress endpoints like /wp-json/ and wp-content/debug.log), so the LLM context could ingest outsider-authored free text from public web content and third-party site responses.