Linux Production Shell Scripts

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes scripts that embed plaintext credentials (e.g., db_pass="password" used with mysqldump -p"$db_pass") and prints/stores generated passwords, which forces secrets to be handled and output verbatim, creating exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes many scripts that create users (useradd, passwd), run sudo operations (apt-get install, systemctl restart/start), modify crontabs and remove files, all of which directly modify system state and require elevated privileges, so it encourages compromising the machine state.