wstg-web-pentest

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Several entries point to external attacker-controlled hosts and a public S3 bucket pattern (cloud storage) which are common vectors for hosting/distributing malicious payloads or for phishing/redirect abuse, so these URLs warrant suspicion.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md specifies an outsider’s free text can be ingested indirectly via live target endpoints by the workflow repeatedly fetching arbitrary user-influenced content (URLs/parameters) and then extracting/grepping it (e.g., reflected/stored findings), so an attacker could inject poison content into the target responses that the runtime reads.