deploy-service

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The deploy script builds a shell command from unsanitized inputs and executes it with subprocess.run(..., shell=True), which enables command injection and remote code execution (high risk for backdoor/abuse); no explicit data exfiltration or obfuscation was found.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly runs arbitrary shell commands and restarts services (modifying system state and likely requiring elevated privileges), so it pushes the agent to change the machine's state.