btpanel

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs constructing and running CLI commands that embed API tokens via a -t argument (e.g., -t YOUR_TOKEN / -t YOUR_API_TOKEN), which implies the agent will ask for and then include secret values verbatim in generated commands — a high-risk secret-exfiltration pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时路径会通过 bt_common/BtClient 直接向宝塔面板 API 读取并把返回的自由文本日志/任务日志等内容喂给脚本解析与输出（例如 scripts/logs.py 调用 get_service_log→get_file_body/PANEL_LOGS/ERROR_LOGS 等读取“content”），而这些文本可能包含由外部请求或系统事件间接注入的任意字符串。

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly advises disabling SSL certificate verification (using "--verify-ssl false"), which is a direct instruction to bypass a security mechanism; otherwise the skill is read-only monitoring and configuration of remote servers and does not request sudo, create users, or modify system files locally.