capgo-live-updates

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes examples that place API keys, private keys, and DB URLs directly in CLI commands and config fields (e.g., capgo login --apikey YOUR_API_KEY, privateKey: 'YOUR_PRIVATE_KEY', DATABASE_URL=postgres://...), which would require an LLM to accept or emit secret values verbatim and therefore risks secret exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill configures runtime update endpoints that the app fetches to download and execute web-layer bundles (remote code), specifically https://api.capgo.app/updates and the self-host example https://your-server.com/updates, which are used at runtime to control the app’s code updates.