frappe-ops-backup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples and restore commands that pass secrets verbatim (e.g., --db-root-password, --admin-password, AWS Secret Access Key placeholders and CLI examples embedding credentials), which would require an LLM to insert actual secret values into generated commands/outputs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt includes explicit privileged operations that modify system state—e.g., "sudo supervisorctl stop/start all", adding cron jobs via "bench setup backups", and site creation/drop commands that use DB root credentials—so it directs the agent to perform actions requiring elevated privileges and that change the host system.