web-vuln-ssti

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill asks for an EXTRA_HEADERS value (example: "Authorization: Bearer ") and then inserts that value directly into curl command lines (via -H "$EXTRA_HEADERS"), which requires the LLM/agent to place secret auth tokens verbatim into generated commands/requests.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document explicitly contains engine-specific RCE payloads and probes designed to achieve remote command execution and read sensitive files (e.g., /etc/passwd), enabling unauthorized system compromise and data exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow only sends attacker-supplied probe strings via HTTP (curl) to the user-provided TARGET_URL/PARAM and then inspects the returned server response; it does not read any outsider-authored free text from a monitored third-party feed/queue.