k8s-nextjs-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes kubectl commands that embed secrets (e.g., --docker-password='TOKEN' / --docker-password='NEW_TOKEN' and --from-literal=key1=value1) as command-line arguments, which requires supplying secret values verbatim in output and thus enables secret exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Kubernetes manifest includes an external container image reference (harbor.example.com/project/app:latest) and docker server (harbor.example.com) that the cluster will fetch at runtime and execute as remote code, making this a required runtime external dependency.