snmp-pentesting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill shows multiple command examples that embed SNMP credentials (community strings like , <rw_community> and literal defaults such as "public"/"private") directly on the command line or as script args, which would require an LLM to include secret values verbatim in generated commands — an exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The GitHub repository (https://github.com/mxrch/snmp-shell) is an unvetted third‑party tool that the skill instructs users to clone and run to obtain remote shells (high potential for misuse or embedded malicious code), while the OID browser link is just documentation and not a download source.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is explicit offensive guidance for SNMP exploitation — including credential brute-forcing, sensitive-data extraction, remote command injection, configuration theft via TFTP, and reverse shells — and therefore constitutes high-risk malicious intent and abuse behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime commands that clone and run remote code (git clone https://github.com/mxrch/snmp-shell followed by pip install / python3 execution), so the fetched repository would be executed during skill use.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly tells the agent to run sudo package installation and to edit /etc/snmp/snmp.conf (and to run sudo pip install), which requests elevated privileges and modification of system files on the host.