expose-tunnel

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The document instructs running and persisting Cloudflare tunnels (named and anonymous) that expose a local service to the public and references stored tunnel credentials, which functions as a remote-access backdoor and enables potential unauthorized access or data exfiltration.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to run privileged-affecting shell commands autonomously (killing processes, installing deps, creating symlinks, starting background servers, and launching Cloudflare tunnels using local credentials), which modifies the machine's runtime state and exposes it to the network.