dalfox-xss

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes command examples that embed credentials verbatim (e.g., --cookie "session=abc123" and --header "Authorization: Bearer token"), which instructs producing commands or code containing secret values directly and therefore risks secret exposure.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 该技能的运行时工作流是对“用户提供的 URL/文件/管道输入”发起扫描并把目标页面/响应内容用于 DOM 挖掘与注入检测；这些页面内容属于运行时抓取的外部网页（outsider-authored free text），会进入 LLM 上下文从而带来间接提示注入风险。