upgrade

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs the agent to read secrets from the user's .env/.env.rb and "move" them into .kamal/secrets (with concrete examples showing variable and command substitutions), which requires the LLM to handle and potentially output secret values verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs running system-altering commands (e.g., kamal upgrade, gem install) that stop/remove services, create Docker networks, and start/modify containers and host networking—actions that change the machine's state and may require elevated privileges.