redteam-mindset

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). This skill contains explicit, actionable offensive-cyber instructions (payloads, exfiltration techniques, defense-evasion and persistence methods) for conducting intrusions and data theft, not merely high-level discussion.

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs harvesting tokens and hardcoded keys from JS/APK artifacts, says "GET it. Decode it. Pass it back," and shows logging of payloads (including passwords), which requires the agent to capture and output secrets verbatim.