server-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly embeds secrets verbatim in commands (e.g., sshpass -p '', echo '<PUBLIC_KEY>', and writing user-provided SSL private keys/certificates), which requires the LLM to output sensitive values directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill issues SSH commands at runtime that fetch and execute remote installers—e.g. "curl -fsSL https://deb.nodesource.com/setup_20.x | bash", "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y", "curl -fsSL https://get.docker.com | sh", and "wget -q https://go.dev/dl/go1.22.0.linux-amd64.tar.gz && tar -C /usr/local -xzf go1.22.0.linux-amd64.tar.gz"—so external content is downloaded and executed during runtime and relied on for installation.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes numerous privileged actions (writing /etc/systemd and /etc/nginx files, running systemctl, apt-get, Docker install scripts, changing sshd_config, adding SSH keys, using root SSH) that modify system state and require sudo/root access, so it clearly pushes the agent to perform state-changing, high-privilege operations.