redis-security

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt shows and instructs embedding plaintext passwords directly into redis.conf, ACL SETUSER commands, and client code (e.g., requirepass, >password, password="..."), which forces the model to produce secret values verbatim and thus creates an exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs modifying system-level configuration (redis.conf), applying firewall/iptables rules, and other root-only changes that alter the machine state and require elevated privileges.