web-publish

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt mandates extracting credentials (e.g., Password and UserName) from .v8-project.json and embedding them as literal command-line parameters (e.g., -Password) in generated PowerShell commands—exemplified with a "secret"—which requires the LLM to output secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill downloads and installs a portable Apache at runtime from https://www.apachelounge.com/download/VS18/binaries/httpd-2.4.66-260131-Win64-VS18.zip and later launches the fetched httpd.exe, which is remote executable code retrieved and executed during skill runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). Навык генерирует и записывает конфигурации Apache (default.vrd, httpd.conf), запускает/устанавливает веб‑сервер и скачивает бинарники — то есть изменяет системные файлы и состояние процесса, что требует повышенных привилегий.