byod-hardware-orchestrator

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires generating and embedding pairing codes and installation strings into commands (e.g., curl/npx) that the agent must output verbatim, which are effectively secrets/tokens and create an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill explicitly implements a sandbox escape and a persistent remote command-and-control pairing/tunnel (via curl/npx installer and remote terminal/GUI control), which are classic backdoor/remote-execution primitives and enable data exfiltration and supply-chain abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly generates a runtime "curl" / "npx" command (a generated remote URL provided at runtime) that the user is instructed to run on their machine to install/link the agent, which will fetch and execute remote code and is required for pairing.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill explicitly enables the agent to break out of the cloud sandbox and execute terminal commands, control apps, and modify local files on a paired machine—directly allowing modification of the host system's state and potential privilege escalation—so it must be flagged.