cli-serve

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes examples and flags that instruct embedding API keys directly (env export and --api-key on the command line), which would require an LLM to output secret values verbatim if real keys are provided.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the agent to register the app as a system startup item — creating systemd user service files and "enabling linger" (persistent service startup), plus platform-specific startup entries — which modifies system startup/service state and may require elevated privileges.