loom-fluxcd

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill contains multiple examples that embed plaintext secrets (e.g., password: supersecret, username/password: user/pass) and instruct exporting or placing tokens/keys into commands and manifests, which would require an LLM to output secret values verbatim if followed—an explicit secret-exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime installation command that fetches and executes remote code via "curl -s https://fluxcd.io/install.sh | sudo bash", which directly runs external script content on the host.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly tells the user to run a remote install script with sudo ("curl -s https://fluxcd.io/install.sh | sudo bash"), which requests root privileges and can compromise the host.