loom-crossplane

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes literal-looking API credentials (example AWS access key and secret) in-line, which encourages the LLM to reproduce secret values verbatim and thus is high-risk secret handling.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime installation steps that fetch and execute remote code and packages — e.g. the curl-piped installer at https://raw.githubusercontent.com/crossplane/crossplane/master/install.sh and multiple Crossplane package references (xpkg.upbound.io/upbound/provider-aws-s3:v1.1.0, xpkg.upbound.io/upbound/provider-aws-rds:v1.1.0, xpkg.upbound.io/upbound/provider-gcp-storage:v1.1.0, xpkg.upbound.io/crossplane-contrib/function-patch-and-transform:v0.2.1, xpkg.upbound.io/crossplane-contrib/function-auto-ready:v0.2.1) as well as the Helm chart repo URL https://charts.crossplane.io/stable — all of which are fetched at runtime and result in executing remote code or controllers.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs running a curl | sh installer and explicitly uses "sudo mv crossplane /usr/local/bin/", which performs privileged modification of system files and requests elevated permissions on the host.