kill-switch-binding

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The dashboard kill flow requires collecting users' TOTP codes and embedding them verbatim in the POST /api/swarm/kill request (i.e., the agent would need to accept and forward one-time secret codes), which is direct secret handling/exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt explicitly instructs the agent to create and delete a persistent file-flag and to modify runtime/orchestrator behavior (add endpoints and read the flag) that changes the machine's persistent state and control flow, so it directs actions that modify the host's state and can affect system behavior across restarts.