read-deleted-pages

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). High-risk dual-use reconnaissance guidance: the content explicitly instructs enumerating subdomains and archived admin/backup paths (including .env/.sql), fetching raw archived responses and WARCs, and using archives that ignore robots — all techniques that enable credential theft and data exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow reads outsider-authored free text by retrieving archived page “original” content and raw archived responses from URLs that may include attacker-controlled text via user-supplied URLs or query/user-generated paths (e.g., Wayback CDX original field and web.archive.org/web/<timestamp>id_/... raw captures).