windows-vm

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds plaintext credentials (e.g., -e PASSWORD="password" and sshpass -p 'password') directly into example commands, forcing the agent to include secret values verbatim in outputs/commands.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The set includes a direct PowerShell installer URL (unsafe to pipe into iex) and a GitHub URL that looks like a typosquat/mismatched username (potentially malicious), while the other URLs are localhost or an official Node.js MSI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup script downloads and installs remote executable code at runtime via Invoke-WebRequest and msiexec for the Node.js MSI (https://nodejs.org/dist/v22.14.0/node-v22.14.0-x64.msi), which fetches and executes remote code required for the skill.