Security Scanning Tools

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes a command that embeds an API key on the command line (zap.sh -daemon ... -config api.key=<your_key>), which would require including secret values verbatim in generated commands and is an insecure pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit instructions to run sudo commands, install packages, and start system services (e.g., apt install, systemctl start, airmon-ng monitor mode), which request elevated privileges and modify the host system state.