frappe-ops-app-lifecycle

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes an explicit example that embeds a GitHub access token in a clone URL (https://TOKEN@github.com/...), which instructs putting a secret directly into a command/URL and would require the LLM to handle or output that secret verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly uses bench get-app with remote git URLs (e.g., https://github.com/org/my_app, git@github.com:org/private_app.git, and https://TOKEN@github.com/org/private_app.git) which are fetched at runtime and whose code (hooks, patches, install scripts) can be executed during install/migrate, so these external repositories can directly supply and run remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt includes instructions to run sudo commands that configure system services (e.g., "sudo bench setup production USERNAME", "sudo supervisorctl restart all", "sudo systemctl restart supervisor") and to set up nginx/supervisor, which modify system files and services and therefore push the agent to change the machine state.