validating-tpm-measured-boot-attestation

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill includes a literal secret string (echo -n "diskkey") piped into a create command, which demonstrates and would cause the LLM to reproduce a plaintext secret verbatim in output/commands.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly requires root/sudo for installing tools and performing TPM NV/AK operations (and warns that TPM-clearing/ownership/NV changes can be destructive), so it instructs privileged, state-modifying actions on the host.