openlist

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes a CLI pattern that sets an admin-token via a direct command-line argument (npx ... config set admin-token <admin-token>) and may instruct the agent to echo or produce that exact config command (including the secret) when guiding the user or reporting errors, which requires handling/outputting secrets verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs "npx @andie/openlist" at runtime, which downloads and executes remote code from the npm registry (e.g., registry.npmjs.org) and is a required dependency for creating shares; the skill also configures the runtime API endpoint https://openlist.example.