hydra-brute

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt shows and instructs embedding plaintext passwords and session cookies directly in commands (e.g., -p "P@ssw0rd", Cookie: session=abc), which requires the agent to handle/output secret values verbatim and is therefore high risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content provides explicit, step-by-step instructions for automated online password brute-forcing, credential stuffing/spraying across many protocols (SSH/FTP/SMB/RDP/DBs/HTTP), including use of credential lists, batch targets, proxy evasion and resume/output features—clearly facilitating unauthorized access and credential theft.