ray-vps

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples that embed credentials directly in commands (e.g. -password ) and explicitly tells the tool to keep subscription URLs/tokens in outputs, which would force an LLM/agent to handle or emit secret values verbatim.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The raw.githubusercontent.com URL is a direct link to a third‑party install.sh and is used in the doc with curl|bash (a high-risk pattern for delivering malware); api.ipify.org is benign and not listed as suspicious.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill runs a remote installer at runtime using bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh), which fetches and directly executes code from that URL.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). 该技能明确指导修改 SSH 配置、/etc 下的系统文件、安装/重启服务、写入 fstab 和防火墙规则等需要 root 权限的破坏性操作，会改变宿主机系统状态并需要 sudo 权限。