clicd-virtualization-panel

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes plaintext passwords in CLI examples (e.g., --password "SecurePass123"), environment variables for admin passwords, and code that prints or sets bearer tokens in Authorization headers, so an agent following it may be required to handle and output secrets verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The set is suspicious because it includes a direct raw.githubusercontent.com link to an install.sh from an unfamiliar GitHub user (which encourages piping a remote shell script to sh) — a high-risk distribution pattern; the other URLs (localhost, your-server-ip) are local endpoints and ara.so appears benign, but the remote install script makes the overall set risky.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The One‑Click Install runs curl -fsSL https://raw.githubusercontent.com/MengMengCode/CLICD/main/install.sh | sudo sh which fetches and executes remote code at install/runtime and is presented as the required installer for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs installing and managing a system service and virtualization stack using sudo (curl | sudo sh), editing system files (/etc/clicd/config.yaml, /etc/sysctl.conf, /etc/default/grub), running systemctl and iptables/sysctl commands, and other root-level operations that modify the host system state and require elevated privileges.