3proxy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt contains plaintext passwords and upstream proxy credentials (e.g., 'strongpassword123', 'r0tate!2025') and instructs generating config lines (users, parent) that embed those secrets verbatim into outputs, creating an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs a runtime installation that clones and builds remote source (git clone https://github.com/3proxy/3proxy.git && make ...), which fetches and executes external code from that URL.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs installing packages, creating/editing system files under /etc, adding a systemd service, and modifying firewall rules (apt, mkdir /etc, /etc/systemd/system/3proxy.service, /etc/3proxy/3proxy.cfg, systemctl, ufw), all of which require root and modify the host system state.