k3s

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes examples that set K3S_TOKEN=SECRET inline in shell commands (and agent join commands), which instructs embedding a secret value verbatim in command output — an insecure pattern that risks secret exposure.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes runtime commands that download and execute remote code (e.g., curl -sfL https://get.k3s.io | sh
• and curl -Lo ... https://github.com/k3s-io/k3s/releases/download/${VERSION}/k3s followed by running the binary), so external content fetched at those URLs would execute code and is required for installation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt instructs installing and configuring K3s (e.g., running curl | sh installer, writing files under /etc and /var, and configuring services), which requires root privileges and modifies system files and services, so it pushes the agent to change the machine state.