db-load-cf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs constructing PowerShell commands that include -Password (and shows a plaintext "secret" example), so the LLM would need to accept and embed user passwords verbatim in its generated commands, risking secret exfiltration.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Yes — the skill runs a local PowerShell script that will overwrite a 1C information base configuration (a destructive, state-changing operation on the host) and may access system paths and credentials to do so.