backend-web-real-time

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes hardcoded TURN/TURN-like credentials in code examples and requires producing TURN/STUN configuration and client integration (which encourages embedding credentials verbatim), creating a risk that the LLM will output secret values directly.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly recommends changing kernel network parameters (net.core.rmem_default, net.core.wmem_default) and thread pinning, which require elevated privileges and modify host system state, so it pushes the agent toward actions that can change the machine's configuration.