vss-deploy-profile

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to prompt for API keys, validate and probe credentials, and write selected credential values into generated.env (including example sed-based overrides), which requires handling and embedding secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime install commands that fetch and execute remote content (curl -LsSf https://astral.sh/uv/install.sh | sh in SKILL.md) and runtime NGC CLI install downloads (https://api.ngc.nvidia.com/v2/resources/nvidia/ngc-apps/ngc_cli/versions/4.10.0/files/ngccli_linux.zip and https://api.ngc.nvidia.com/v2/resources/nvidia/ngc-apps/ngc_cli/versions/4.10.0/files/ngccli_arm64.zip in references/ngc.md), which meet the criteria for executing remote code during skill runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to detect sudo and to auto-run privileged host remediation/installers when passwordless sudo is available (while only forbidding running privileged installers when sudo requires a password), which encourages the agent to perform privileged system modifications.