scanning-infrastructure-with-nessus

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly shows and requires embedding credentials/tokens in commands (e.g., username/password in the curl session POST and X-Cookie: token=), meaning the agent would need to handle and output secret values verbatim, creating an exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running privileged system commands (e.g., "sudo systemctl start nessusd" and "sudo systemctl enable nessusd") and other service-level operations that modify the host's system state and require elevated privileges.