Linux Production Shell Scripts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow runs log-reading scripts (syslog grep and Apache access.log analysis) whose outputs include attacker-controllable request paths and log text, and outsiders can generate these entries by sending traffic to the monitored services without the agent selecting any specific item.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.65). The skill is a collection of general sysadmin script templates, but it includes a user-account creation script (useradd plus interactive passwd) and several sudo-based system changes, which the criteria explicitly flag.