configuring-zscaler-private-access-for-ztna

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes commands and configuration fields that require inserting secrets verbatim (e.g., the App Connector provisioning key used with --provision-key and the Splunk HEC token), which would force an LLM to handle or emit sensitive credentials directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime installation commands that fetch and install remote packages (executing remote code) from vendor URLs such as https://yum.private.zscaler.com/yum/el7/zpa-connector-latest.rpm and the apt repo at https://dist.private.zscaler.com/apt, which are required dependencies for the App Connector setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit privileged operations (sudo yum/apt installs, adding apt repositories and keys, writing to /etc, and enabling/starting systemd services) that modify system files and services and therefore pushes the agent to change the host state.