da-cli-deviantart-sync

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The doc instructs users (and any agent automating it) to place client secrets directly into commands and environment variables (e.g., da config set client_secret YOUR_CLIENT_SECRET, export DA_CLIENT_SECRET=..., and da config get client_secret --unmask), which requires including secret values verbatim and poses an exfiltration/credential-leak risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs the user to modify system scheduling and security settings (creating launchd/systemd units, running launchctl/systemctl commands, enabling lingering, and granting Full Disk Access), which changes the machine's state and includes actions that can require elevated/system-level privileges.