kie-byok-stuck

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly constructs and runs commands that embed secrets into request headers and CLI auth (e.g., Authorization: Bearer $(psql ...apiKey...) and redis-cli -a "$REDIS_PASS"), which requires handling and transmitting secret values verbatim and is a high exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an explicit runtime SSH command that connects to root@172.245.56.50 and runs remote code ("npx tsx src/scripts/schwed-photoday-v4.ts"), so the external host 172.245.56.50 is a required runtime dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs SSHing as root and running commands that edit system files (sed on /opt/.../.env) and restart services (pm2 restart), which modify machine state and require privileged access.