oci-functions-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs prompting for OCIR credentials and running scripts with flags like --ocir-auth-token (and otherwise solicits OCIR login inputs), which requires the LLM to accept and include secret values verbatim in commands/flags.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill fetches and installs the Fn CLI at runtime by calling the GitHub releases API (https://api.github.com/repos/fnproject/cli/releases/latest) and then downloading the release asset (https://github.com/fnproject/cli/releases/download/$VERSION/fn_linux / https://github.com/fnproject/cli/releases/download/{tag}/fn_linux), which results in executing remote code on the host.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs mutating local actions that include installing system tools, "starting the Docker daemon", and a "privileged installation" step (which imply obtaining elevated privileges and modifying system state), so it pushes the agent to perform potentially privileged changes to the host.