penetration-testing-with-strix

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill asks for API keys/tokens and includes an explicit example that embeds plaintext credentials on the command line (--instruction "Use credentials user@example.com:pass123"), which would require the LLM to accept and reproduce secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). https://strix.ai/install is a direct installer script fetched with "curl | bash" (a high-risk pattern that can distribute malware), while the other URLs are docs, API endpoints, a GitHub repo or example hosts and are not inherently suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow for this skill is an AI pentesting engine that primarily ingests user-provided targets/instructions (e.g., via strix -t ... or Cloud POST /scans with domain_ids) and does not describe reading outsider-authored free text feed content (like emails, tickets, chat, GitHub issue/PR text, etc.) without an explicitly chosen target.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The SKILL instructs installing the CLI with "curl -sSL https://strix.ai/install | bash", which fetches and executes remote code during setup (runtime), making it a high-risk external dependency.