proxy-networking

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly handles sensitive credentials (VLESS share links, WireGuard preshared keys, UUIDs/public keys) and its examples and tooling show passing those secrets as command-line flags or generating share links, which requires the agent to include secret values verbatim in commands/outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs fetching and running an external installer (wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh) in references/v2ray-agent.md and SKILL.md (use v2ray-agent/vasma), which is public, untrusted third‑party content fetched and executed as part of the required workflow and can materially change subsequent actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching and running remote installer code at runtime from https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh (and references the project https://github.com/mack-a/v2ray-agent) to install v2ray-agent/vasma, so remote content would be executed and is relied upon by the workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating/updating systemd units and editing system files (e.g., /etc/wireguard, /etc/sing-box, /etc/v2ray-agent) over SSH and defaults to root@IP, which requires privileged changes to host state and thus can modify/compromise machine state.