rterm-plugin

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill exposes high-risk plugin capabilities (dynamic import/execution of plugin code, host command execution, spawning sidecar processes via npx, and access to secrets/ledgers) that could be abused for remote code execution, credential theft, and data exfiltration if untrusted plugins are installed.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly exposes privileged host-affecting primitives (manifest "exec_command" permission, ctx.exec, ctx.spawnProcess / npx sidecars), and instructs copying plugins into backend system paths and uninstalling/reloading plugins — all of which enable modifying the machine state and running processes on the host.