dgx-diagnose

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt explicitly recommends passing a HuggingFace token inline in a Docker command (e.g., -e HF_TOKEN="hf_..."), which is an insecure pattern that can require the LLM to include secret values verbatim in generated commands or code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo commands and altering system services/files (e.g., sudo fuser, sudo systemctl start nvidia-fabricmanager, sudo cp /etc/X11/... /etc/X11/xorg.conf), which modify the machine state and require elevated privileges.