osmo-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to prompt for and map sensitive credentials (DB passwords, storage keys, S3 access keys) into env vars or flags and then invoke scripts, which requires the LLM to receive and/or embed secret values verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.40). The skill tells the agent/user to run deployment scripts that perform system-level operations (e.g. snap/microk8s bootstrap, Terraform, creating cloud identities and K8s Secrets) which can change the host and cloud state, but it does not explicitly instruct the agent to escalate privileges, modify system files like ssh/systemd, or create local users.