install-xray-reality

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly requires reporting generated client secrets (UUIDs, REALITY password/public key, Short ID, share links) in outputs while only forbidding server private keys, which forces the LLM to handle and emit secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.85). Most URLs are documentation or lookup tools, but the raw GitHub URL points to a shell installer (a direct .sh download intended to be executed), which is a high-risk distribution vector if run without inspection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes a runtime command that curls and pipes a remote script into bash, which executes code from https://github.com/XTLS/Xray-install/raw/main/install-release.sh.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing binaries, writing and replacing service/config files (e.g., /usr/local/bin, /etc/systemd/system/xray.service), validating and placing configs, reloading/enabling/restarting systemd services, and potentially changing the firewall — all actions that modify machine state and require elevated privileges.