ci-cd

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires scanning and extracting CI/CD file contents (commands, env vars and "secret cần có") and reporting them verbatim, which risks exposing any hard-coded API keys, tokens or passwords found in those files.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to run git commands and, in FORCE MODE, to run git add -A && git commit -m "chore: force deploy" and git push without confirmation, which will modify local repository state and push changes to remotes (so it alters machine and remote state), though it does not request sudo or change privileged system files.