remote-shell

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt explicitly instructs the agent to use sshpass -p '<密码>' and read passwords from local configuration files or user input, which presents a high risk of handling and potentially exposing plain text passwords in command executions.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses a remote shell CLI and SSH/SFTP to execute commands and transfer files on remote servers, which involves ingesting text output (such as command execution output or file contents) from remote servers where outsiders could potentially place untrusted content.