wp-mass-recon

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The set includes an explicit attacker-controlled domain (https://evil.com and its /?d= exfiltration endpoint) used as an Origin/PoC exfiltration target, which is a clear malicious indicator; the other entries (TARGET host WP endpoints and crt.sh) are benign recon targets or tooling endpoints.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The code is a mass WordPress reconnaissance scanner with explicit PoC for credential exfiltration (fetch to "https://evil.com" with credentials) and multiple mass-scanning/evasion patterns that enable broad unauthorized data collection and credential theft.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime path scripts/scanner.py:test_target() reads outsider-authored free text from the user-supplied targets.txt/domain fields and then fetches and ingests that target-originated HTTP response bodies (e.g., /wp-json/wp/v2/users, /xmlrpc.php, and sensitive paths) via curl_raw().