moving-day

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask for root SSH access and to accept and write API keys/bot tokens into .env.local (via SSH stdin) and to "connect the bot token", which requires the LLM to receive and embed secret values verbatim into commands/files — an explicit secret-handling/exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly asks for root SSH access, creates a new user and copies SSH keys, edits sshd_config, and copies/enables systemd units with sudo — all actions that modify system state and require elevated privileges, so it must be flagged.