validating-tpm-measured-boot-attestation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes examples that embed plaintext secrets directly into commands (e.g., echo -n "diskkey" | tpm2_create) so using real secrets would require the agent to handle/output them verbatim, creating an exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing packages with sudo and running root-only commands (e.g., reading sysfs, creating/loading TPM primary/attestation keys, sealing/unsealing, and running a sudo agent), which modify TPM state and system configuration and therefore push the agent to change the machine state.