unifi-network-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs the agent to collect username/password (and optional API key) from the user and then include those secret values verbatim in generated shell commands/environment-variable assignments (e.g., UNIFI_NETWORK_PASSWORD=), which directly exposes credentials in the LLM output.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill instructs the agent to run setup scripts and write sensitive credentials and environment variables into local runtime configuration (e.g., .claude/settings.local.json, codex/openclaw MCP server), thereby modifying the host agent's configuration and state (including storing secrets) even though it doesn't request sudo.