secure-code-review

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill document contains multiple explicit instructions to "implement" vulnerabilities (e.g., command injection, insecure defaults, supply chain issues) which indicate deliberate creation of security weaknesses rather than defensive tooling, representing a high risk of malicious or abuse-oriented intent.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly asks to "implement" dangerous behaviors such as command injection and privilege escalation (and other insecure misconfigurations/misuses), which encourages creating exploits or vulnerable system-altering code that could be used to compromise the host.