implementing-velociraptor-for-ir-collection

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill embeds a plaintext credential ("password: secure_password") in the Elastic integration config, which would require the model to reproduce a secret-like value verbatim if it emits that config.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The SKILL.md includes a runtime wget that downloads and then executes a remote Velociraptor binary (https://github.com/Velocidex/velociraptor/releases/latest/download/velociraptor-linux-amd64), which clearly fetches and runs remote code required for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing and registering a privileged agent/service (uses sudo to copy binaries and run "service install"), repacks/deploys clients, and runs containers mounting host paths — all actions that modify system state and require elevated privileges.