ray-vpsinit

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly shows a CLI command that embeds a panel password as a command-line argument ("/usr/local/x-ui/x-ui setting -username -password ..."), which would force an LLM to handle or emit the secret value verbatim in generated commands — a clear exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). This is a raw.githubusercontent.com link to a third‑party install.sh that the skill pipes to bash — executing unverified remote shell scripts from an external GitHub user is high-risk and can deliver malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly executes remote code at runtime via piping a curl download into bash (echo 'y' | bash <(curl -Ls https://raw.githubusercontent.com/MHSanaei/3x-ui/v3.4.1/install.sh) v3.4.1), so the URL https://raw.githubusercontent.com/MHSanaei/3x-ui/v3.4.1/install.sh is a required runtime dependency that directly executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs modifying system files (/etc/ssh/sshd_config, /etc/sysctl.d, /etc/fstab), installing packages, creating swap, altering firewall rules, and restarting services (via apt, systemctl, iptables/ufw, ssh-copy-id, curl|bash), all of which change the machine state and require elevated privileges.