cliproxy-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs generating, placing, and using API keys (e.g., inserting NEW_KEY into config, scp’ing auth JSONs, and running curl with Authorization: Bearer <NEW_KEY>) which forces the agent to handle and potentially emit secret values verbatim in commands or session outputs, creating an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill performs a runtime git clone of https://github.com/router-for-me/CLIProxyAPI.git and then executes that code via go run ./cmd/server, so fetched remote code is executed and controls the deployed agent’s runtime behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Yes — the skill instructs connecting as root and executing privileged system changes (apt installs, UFW firewall rules, writing files under /root, starting/stopping processes and editing shell rc), which modify the machine's state and require/assume root privileges.