ci-cd-pipeline

Warn

Audited by Snyk on Mar 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill guides creating and running deployment workflows and SSH-based deploy scripts that modify server state (git pulls, migrations, installing packages), includes privileged operations like "sudo systemctl reload php8.3-fpm", and advises using ssh-copy-id / adding deploy keys—actions that alter system/service configuration and require elevated permissions.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 3, 2026, 11:54 PM
Security Audit — snyk — ci-cd-pipeline