perplexity-incident-runbook

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The runbook mostly uses environment variables for Authorization, but it also instructs embedding new API keys verbatim in CLI commands (e.g., --data-file=<(echo -n "NEW_KEY") and --from-literal=api-key=NEW_KEY) and prints key prefixes/lengths, which requires handling or exposing secret values and is an insecure pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This runbook instructs privileged changes to infrastructure (gcloud secret updates, kubectl create secret/apply, kubectl set env, kubectl rollout restart) which modify cluster/cloud state and require elevated privileges, so it can change the machine/cluster state and potentially compromise it.