obs-config

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes examples and CLI flags that pass streaming keys and a service.json "key" field (e.g., --key, "STREAM-KEY-HERE" / "live_..."), which require the agent to accept and embed secret stream keys verbatim into commands/config files — an insecure secret-handling pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running privileged/system-altering commands (e.g., sudo add-apt-repository && sudo apt install, sudo xattr -rd to bypass Gatekeeper) and modifying system-installed application files/config, which pushes the agent to perform state-changing and security-bypassing actions.