deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt explicitly instructs embedding plaintext secrets in commands (e.g., cloning with https://:@github.com/... and copying .env files via scp), which requires the LLM/agent to handle secret values verbatim and thus risks exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's error-handling guidance includes the command "curl -fsSL https://get.docker.com | sh", which, if run during deployment when Docker is missing, would fetch and execute remote code at runtime from https://get.docker.com.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo, creating/chowning directories under /opt, installing packages (Docker/git), generating SSH keys and modifying/writing server files (.env, deploy keys), and running docker-compose — all actions that change the machine state and often require elevated privileges.