ldap-pentesting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill repeatedly shows commands and code that embed plaintext credentials (e.g., -w '', -p 'Password1', /:, and literal 'PASSWORD' in code), which would require an LLM to handle or output secret values verbatim if actual secrets are substituted.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The Apache Directory Studio and JXplorer links are official, low-risk vendor pages, but the two GitHub repos (https://github.com/Macmod/godap and https://github.com/Macmod/ldapx) are third‑party projects hosted under a personal/unknown account and thus match high-risk indicators for distributing tooling/executables from an untrusted source.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content is an explicit offensive LDAP penetration-testing guide containing multiple deliberate abuse techniques (credential harvesting, LDAP injection, Kerberoasting, attribute modification to implant SSH keys or add to privileged groups, sniffing/MITM, and local data extraction) that can be directly used for unauthorized access and persistence.