kasm-admin

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.85). The content contains several high-risk, easily-abusable operational patterns — notably bulk DB updates that inject arbitrary "first_launch" bash payloads (including creating NOPASSWD sudoers entries across all workspaces), enabling privileged containers, adding host volume mounts to user workspaces, and explicit rclone syncs to external B2 storage — which together can be used as persistent backdoors, privilege-escalation vectors, and a straightforward data-exfiltration channel despite being presented for legitimate admin/bot deployment.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs administrative, state-changing operations (user/group management, bulk Docker/config updates, DB queries) and even shows sudo docker exec commands that require privileged access, so it pushes the agent to perform privileged system modifications.