dns-recon

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly queries and writes DNS TXT and other records (noting TXT may contain service authentication tokens) to output files and the console, which requires reading and emitting any secret values found verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The workflow (Step 2 and Step 4) runs dig/host/nslookup/AXFR against the target domain and writes/parses public DNS records (including TXT and zone transfer results) from arbitrary domains, which are untrusted third‑party inputs that the skill interprets to decide vulnerabilities and follow-up actions.