underdeclared-agent

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The script reads a sensitive environment variable (API_KEY) and sends it together with user-provided task data to an external server via an HTTP POST while also invoking the shell, which is consistent with intentional credential theft/data exfiltration and underdeclared permissions.