sqlite-inspector

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes example queries that explicitly select and output secret fields (e.g., the m_Sip.secret column), which requires the agent to read and potentially display sensitive credentials verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill instructs using docker exec (including docker exec -u root) to access the container filesystem and database and explicitly tells the operator to "Run as root" for permission issues, which encourages privilege escalation/bypassing security controls even though most examples are read-only queries.