Skills

The skill facilitates high-privilege identity management and executes unauthorized network and shell commands, creating significant risks for privilege escalation, data exfiltration, and uncontrolled agent recursion.

This skill hijacks agent model selection, mandates insecure external documentation fetching, and contains hardcoded commands for data exfiltration, posing significant risks to agent integrity and user security.

This skill facilitates SSRF and data exfiltration by allowing unvalidated user input in network requests, exposes sensitive environment variables, uses insecure CORS policies, and lacks necessary security capability declarations.

This skill poses a critical risk by enabling arbitrary JavaScript execution, session hijacking, and unauthorized local file exfiltration while lacking necessary security constraints or declared tool permissions.

The skill performs unauthorized file writes and initiates unapproved outbound network connections, creating a significant risk of data exfiltration and system compromise.

This skill lacks necessary tool constraints and security declarations while facilitating data exfiltration via unauthorized network access and insecure credential handling practices.

The skill executes unpinned, unverified dependencies and performs unauthorized network requests while insecurely handling sensitive API tokens without declaring necessary tool constraints or security boundaries.

The skill executes unpinned packages and performs unauthorized network operations, creating significant supply chain risks and potential data exfiltration vectors due to a lack of defined tool constraints.

The skill performs unauthorized network communication and executes arbitrary commands without declaring necessary tool permissions, creating an unconstrained surface for potential data exfiltration and system compromise.

The skill is critically insecure, exhibiting SQL injection, SSRF vulnerabilities, unconstrained network access, and insecure secret handling while failing to pin dependencies or declare necessary security capabilities.

The skill performs unauthorized network operations and executes commands without declaring required tools, while relying on missing documentation that obscures its runtime behavior and data handling practices.

The skill executes unsafe dynamic code, performs unauthorized network requests, and lacks necessary documentation, creating significant risks for code injection and unconstrained data exfiltration.

The skill performs unauthorized network operations and executes commands without declaring required tools, while relying on missing documentation that suggests potential runtime dependency on external, unverified sources.

The skill contains hardcoded credentials, lacks necessary tool and network constraints, uses insecure dependency management, and references missing documentation, creating significant security and supply chain risks.

The skill performs unauthorized network operations and executes commands without declaring required tools, while containing infinite loop patterns that pose a significant risk of resource exhaustion and data exfiltration.

The skill is vulnerable to Server-Side Request Forgery due to unvalidated user input in HTTP and WebSocket requests, potentially allowing unauthorized access to internal infrastructure and metadata services.

The skill insecurely exfiltrates sensitive environment variables via network commands and lacks necessary tool declarations, creating an unconstrained and high-risk attack surface for credential theft.

The skill performs unsanitized command execution and unauthorized network exfiltration while failing to declare necessary tool permissions, creating a significant risk of remote code execution and data theft.

The skill performs unauthorized network requests and executes arbitrary commands without declaring necessary tool permissions, creating a significant risk of data exfiltration and unconstrained system access.

The skill performs unauthorized network communication and executes arbitrary commands without declaring necessary tool permissions, creating a significant risk of data exfiltration and unconstrained system access.

This skill exfiltrates environment secrets and API keys by scraping local configuration files and executing unauthorized network requests while bypassing all tool-based security constraints.

The skill performs unauthorized network access and executes commands without declaring required tools, creating an opaque execution environment capable of silent data exfiltration and external dependency fetching.

This skill functions as a malicious exploitation toolkit that instructs the agent to perform destructive SQL injections, exfiltrate credentials, and execute unauthorized reverse shells against target systems.

The skill performs unauthorized network exfiltration of environment secrets and executes unconstrained system commands without declaring necessary tool permissions or security boundaries.

The skill facilitates cross-site scripting through unsanitized input, exposes sensitive environment variables, and performs unauthorized network operations without declaring necessary tool permissions or security constraints.

The skill executes unverified remote code via forced global updates and lacks necessary tool constraints, creating a high-risk vector for arbitrary command execution and credential exfiltration.

The skill performs unauthorized network exfiltration and executes arbitrary commands while bypassing security constraints by failing to declare its required tools and capabilities.

The skill performs unauthorized network operations and executes commands without declaring required capabilities, while relying on external, unverified documentation that poses a risk of runtime code injection.

The skill exfiltrates environment secrets to external network sinks while bypassing security constraints by executing unauthorized network requests and file operations without declaring required tool permissions.

The skill performs unauthorized network requests and executes commands without declaring required capabilities, creating an opaque and potentially malicious execution environment that lacks necessary security constraints.

The skill performs unauthorized file writes and network requests, uses unpinned dependencies, and includes malicious patterns for data exfiltration via shell commands.

The skill executes unauthorized network requests and arbitrary commands to exfiltrate data while bypassing security constraints by failing to declare its required tools and capabilities.

The skill performs unauthorized file writes and initiates unapproved outbound network connections, creating a significant risk of data exfiltration and system compromise.

The skill exfiltrates sensitive GitHub credentials from local environment files and performs unauthorized outbound network requests while bypassing all tool-based security constraints and access controls.

This skill poses a critical security risk by executing unpinned global dependencies and performing unauthorized network exfiltration of environment variables while lacking necessary tool-use constraints.

This skill impersonates a legitimate AI brand and contains malicious code that uses network utilities to exfiltrate sensitive data.

The skill executes unpinned packages and performs unauthorized network exfiltration while bypassing security constraints by failing to declare its tool surface or network capabilities.

The skill exposes hardcoded credentials, lacks necessary tool and network constraints, and performs unauthorized outbound data transmissions, creating significant risks of credential theft and unmonitored system access.

The skill performs unauthorized network exfiltration via curl and wget while bypassing security constraints by failing to declare its tool usage or network capabilities.

The skill facilitates data exfiltration via shell commands, exposes sensitive credentials through insecure configuration practices, and lacks necessary security constraints for its network and file system operations.

The skill performs unauthorized network exfiltration via curl/wget and executes unconstrained system commands while masking its true functionality through missing documentation and suspicious hidden instructions.

The skill performs unauthorized network exfiltration via shell commands and lacks necessary tool declarations, while relying on missing external assets that create unpredictable and insecure runtime behavior.

This skill exfiltrates data via unauthorized network commands, processes sensitive payment information, and lacks necessary tool declarations, indicating a high risk of malicious activity and insecure design.

The skill performs unauthorized network exfiltration via shell commands and lacks necessary tool declarations, while relying on missing external assets and suspicious hidden instructions to execute its workflow.

This skill exfiltrates data via unauthorized network commands, processes sensitive payment information, and lacks necessary security declarations, while relying on missing external assets to execute potentially malicious hidden instructions.

The skill lacks declared tool permissions and executes unauthorized network requests to exfiltrate data while referencing missing files that may hide malicious runtime instructions.

The skill performs unauthorized network exfiltration and command execution while relying on external, unverified references that expose the agent to prompt injection and supply chain manipulation.

The skill performs unauthorized shell execution and file operations while using dangerous command injection patterns to exfiltrate data via unapproved network requests.