pentest-tools

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Yes — the list includes many direct links to attacker-controlled executables and scripts (PowerShell .ps1, .exe, .hta/.sct, hosted JS and raw payload files) which are high-risk download sources commonly used to distribute malware or bootstrap malicious agents.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The repository contains extensive, actionable offensive tooling and payloads (remote code execution, webshells, credential/metadata access, DNS/HTTP exfiltration, C2 usage and EDR/AMSI/ETW bypasses) that enable deliberate malicious compromise and data exfiltration beyond benign security guidance.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill states that if the local payloads directory is empty it will automatically download and extract payloads from SecLists (https://github.com/danielmiessler/SecLists), meaning content from that external URL can be fetched at runtime and injected into the agent's testing context (controlling prompts/payloads).