tls-fingerprint-impersonation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes examples that embed credentials verbatim (proxy URL with user:pass, Authorization: "Bearer token", and plaintext login JSON), which requires the agent to place secret values directly into generated code/commands and therefore poses an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill explicitly instructs how to impersonate real browser TLS ClientHello fingerprints and evade TLS-fingerprinting protections (Cloudflare/Akamai/F5), including guidance for stealth, proxying, header/IP spoofing, and automated login — behaviors that enable covert access, scraping, and likely abuse.