linux-shell-scripting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes hardcoded plaintext credentials (db_pass="password") and uses them directly on the command line (mysqldump -p"$db_pass"), which forces any agent following the template to handle or emit secret values verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly includes scripts that create user accounts (useradd/passwd) and invoke privileged operations with sudo (apt-get install, systemctl restart), instructing modification of the host system's state.