security-scanning-security-hardening

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). This skill’s runtime workflow ingests only the user-provided placeholder input (“$ARGUMENTS”) to drive security scanning/remediation phases (e.g., prompts in Phase 1-4), and does not describe reading arbitrary outsider-authored free text from external systems without selecting specific items.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs invasive remediation and deployment steps (apply security patches, deploy SIEM/Secrets managers, configure infrastructure, and perform penetration tests including privilege escalation) that would change system or infrastructure state and likely require elevated privileges, though it does not directly instruct bypassing sudo or creating users.