deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt requires reading local .env values (VITE_OIDC_AUTHORITY and VITE_OIDC_CLIENT_ID) and then embedding them into remote .env via generated commands/here-docs, which forces the agent to handle and output secret/config values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill runs a provisioning step that executes remote install script via "curl -fsSL https://bun.sh/install | bash" (and also clones and deploys code from "git@github.com:popmechanic/Julian.git"), so external content is fetched at runtime and executed/used as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill instructs the agent to perform privileged, state-changing operations (sudo installs, copying systemd service files, enabling services, modifying SSH configs/keys, and using StrictHostKeyChecking=accept-new) on target VMs — i.e., it directs the agent to modify system files and bypass SSH host-key checks, which are high-risk actions.