Skills

The skill executes unpinned packages and performs unauthorized network and file operations while accessing sensitive environment variables without declaring necessary tool constraints or security permissions.

The skill executes unpinned packages and accesses sensitive environment variables without defined tool constraints, creating significant supply chain risks and potential for unauthorized data exfiltration.

The skill violates naming conventions, lacks a license, and poses a significant security risk by accessing sensitive environment variables without justification.

The skill violates naming conventions, lacks a license, and improperly accesses sensitive environment variables, posing a significant risk of credential exfiltration.

The skill lacks defined tool constraints, executes unpinned packages, and accesses sensitive environment variables, creating significant supply chain and data exfiltration risks.

This skill poses significant risks by executing unpinned packages, accessing sensitive environment variables, and performing unconstrained system operations while lacking transparency regarding its purpose and security controls.

The skill poses a security risk by accessing sensitive environment variables, potentially exposing credentials and configuration data to unauthorized processes.

The skill poses a security risk by accessing sensitive environment variables, potentially exposing critical system credentials and configuration data.

The skill attempts to access sensitive credential files and perform unauthorized file writes while actively bypassing mandatory human oversight protocols.

The skill exposes hardcoded credentials, executes unpinned packages, and performs unauthorized network and file operations without declaring necessary tool constraints, creating significant security and supply chain risks.

The skill poses a security risk by attempting to access sensitive credential file paths, potentially leading to unauthorized exposure of AWS access keys and environment secrets.

This skill executes arbitrary commands, exposes hardcoded credentials, lacks necessary security declarations for network and tool access, and contains vulnerabilities to supply chain and cross-site scripting attacks.

The skill contains hardcoded credentials, lacks necessary tool and network constraints, uses insecure dependency management, and references missing documentation, creating significant security and supply chain risks.

The skill lacks defined tool constraints and network permissions while accessing sensitive environment variables, creating an unmonitored attack surface that risks unauthorized data exfiltration and system compromise.

The skill exhibits suspicious behavior by attempting to access sensitive credential files while simultaneously initiating unauthorized network connections, indicating a high risk of data exfiltration.

The skill insecurely exfiltrates sensitive environment variables via network commands and lacks necessary tool declarations, creating an unconstrained and high-risk attack surface for credential theft.

The skill exhibits unauthorized access to sensitive environment variables, posing a significant risk of credential exfiltration and data exposure.

This skill impersonates a reputable brand while containing unauthorized code patterns that access sensitive environment variables, posing a significant risk of credential exfiltration.

The skill accesses sensitive environment variables and executes arbitrary commands without declaring allowed tools, creating an unconstrained and high-risk attack surface for potential system compromise.

The skill is insecure due to unauthorized file system access, potential command injection vulnerabilities, unpinned package installations, and the use of undocumented file write operations.

The skill attempts unauthorized access to sensitive credential files and performs unlisted file write operations while relying on external, unverified documentation, posing significant data exfiltration and integrity risks.

The skill attempts unauthorized access to sensitive credential files and performs unlisted file write operations while relying on external, unverified documentation references that pose a supply chain risk.

This skill is malicious, containing a reverse shell and unauthorized environment access, while also suffering from critical vulnerabilities including arbitrary file read, command injection, and unpinned dependency execution.

The skill facilitates cross-site scripting through unsanitized input, exposes sensitive environment variables, and performs unauthorized network operations without declaring necessary tool permissions or security constraints.

This skill facilitates unauthorized access and system compromise by providing automated exploitation, credential brute-forcing, and persistence mechanisms while lacking necessary security constraints on its tool execution surface.

This skill performs unauthorized file system traversal and credential access while deceptively misrepresenting its high-risk operations as safe in the manifest.

The skill performs unauthorized network communication and accesses sensitive environment variables while bypassing security constraints by failing to declare its tool surface or capabilities.

This skill lacks necessary security constraints, performs unauthorized network and file access, contains SQL injection vulnerabilities, and promotes the execution of unverified third-party code.

The skill lacks declared tool constraints while accessing sensitive environment variables and performing unauthorized network operations, posing a significant risk of data exfiltration and arbitrary command execution.

The skill lacks defined tool constraints, attempts to access sensitive credential files, and relies on external, unverified documentation, creating significant risks for unauthorized system access and supply chain compromise.

The skill accesses sensitive credential files and executes unauthorized system commands without declaring necessary tool constraints, posing a significant risk of credential theft and arbitrary code execution.

This skill is a malicious toolkit that automates unauthorized persistent access, credential theft, and lateral movement through SSH key injection, brute-forcing, and reverse shell establishment.

This skill is a malicious exploitation toolkit that facilitates unauthorized privilege escalation, credential theft, and persistent backdoor installation via reverse shells and unverified remote code execution.

The skill performs unauthorized file system access and hidden network operations while bypassing security constraints by failing to declare its tool usage and capabilities.

This skill functions as a malicious toolkit that provides instructions for credential harvesting, keylogging, persistence, and bypassing security controls to facilitate unauthorized system exploitation and surveillance.

This skill functions as a malicious offensive toolkit that instructs the agent to perform domain-wide credential theft, privilege escalation, and persistence while actively bypassing security and defensive controls.

This skill impersonates a known brand while exfiltrating sensitive environment variables and credential files through unauthorized network connections.

This skill performs unauthorized persistent code execution via git hooks, exfiltrates sensitive environment variables, and bypasses security constraints by executing undocumented network and file system operations.

This skill lacks defined tool constraints and attempts to access sensitive credential files, posing a significant risk of unauthorized data exfiltration and system compromise.

The skill poses a significant security risk by attempting to access sensitive credential file paths, indicating potential unauthorized data exfiltration.

The skill requests excessive workspace-wide write permissions and insecurely mandates storing sensitive Jira credentials in predictable local files vulnerable to exfiltration by malicious processes.

This skill exhibits dangerous patterns including credential exposure, unauthorized system enumeration, and unconstrained command execution, creating significant risks for lateral movement, data exfiltration, and system compromise.

The skill executes unverified remote scripts via shell pipes and uses insecure exec directives to handle sensitive credentials, creating critical command injection and credential exfiltration vulnerabilities.

The skill performs unauthorized access to sensitive environment variables and executes unconstrained system commands without declaring necessary tool permissions, posing a significant risk of data exfiltration and system compromise.

The skill uses keyword stuffing to hijack queries, accesses sensitive environment variables, and executes unconstrained system commands, posing a significant risk of data exfiltration and unauthorized system access.

The skill lacks defined tool constraints and improperly accesses sensitive environment variables, posing a significant risk of unauthorized data exfiltration and arbitrary command execution.

This skill exposes hardcoded credentials and executes unconstrained network and system commands without declaring necessary permissions, creating significant risks for unauthorized data exfiltration and system compromise.

This skill contains critical vulnerabilities, including unauthorized access to credential files, SQL injection patterns, and path traversal flaws, posing a severe risk of data exfiltration and system compromise.