scanning-tools

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs the agent to "show the exact command(s)" before running and includes an example that passes an API key on the command line (zap.sh ... api.key=<your_key>), which encourages embedding secrets verbatim into commands and therefore could force the LLM to handle/output secret values directly.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly includes many privileged commands that modify the host (sudo apt/systemctl installs and starts, enable monitor mode, deauthentication attacks, virus-definition updates and system audits), so it directs actions that change the machine's state despite a confirmation gate.