gitlab-runner-provision

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill asks the user for a GitLab registration token and shows command templates that embed that token verbatim as a command-line argument (e.g., register_runner.sh "..."<注册token>"..."), so the agent would need to handle/output the secret directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The provisioning script executes a remote installer via curl -fsSL https://get.docker.com | sh at runtime (see scripts/provision.sh and SKILL.md), which fetches and executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running remote scripts that modify system state (install Docker via curl|sh, create/start containers with host docker.sock mounted, and add SSH keys/config), actions that require privileged/sudo access and change the machine.