vps-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill tells the agent to read secret-containing files (deploy/deploy.env and .env) and to construct shell commands embedding those values (e.g., ssh -i {VPS_SSH_KEY}, scp .env ...), which requires the LLM to include secret values verbatim in its generated commands/outputs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill clones and uses the repository specified by REPO_URL (e.g., git@github.com:user/repo.git) at runtime and then links/builds/runs that repo's Dockerfile/docker-compose, which executes remote code fetched from that URL and is required for the skill to complete.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill instructs remote package installation (apt-get), enabling/starting system services (systemctl), creating SSH keys and modifying ~/.ssh/config and system directories (e.g., /opt/apps), all of which change the host machine's state and typically require elevated/sudo privileges.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)