mysql

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes hard-coded credentials (e.g., MYSQL_ROOT_PASSWORD=secret, password='secret' in code, 'repl_password' in replication SQL) and examples that embed them directly in commands/configs, forcing the agent to output secret values verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly includes commands that require sudo (e.g., apt-get install, mysql_secure_installation) and edits system MySQL config (my.cnf) and service/state (replication, backups), which instruct modifying the host system state rather than purely describing file formats or code usage.