openstack-backup
Fail
Audited by Snyk on Jun 27, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.85). The prompt contains multiple insecure patterns (inline passwords like MYSQL_ROOT_PASSWORD=testpass and mysql -u root -ptestpass, explicit --password=${DB_ROOT_PASSWORD} usage, and references to passwords.yml and passphrase files) that would encourage or require placing secret values verbatim into generated commands or scripts, creating an exfiltration risk.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the prompt contains explicit system-level operations (mkdir/chown/chmod under /opt, writing /etc/cron.d, cp from /etc, using /root/.backup-passphrase, kolla-ansible deploy/bootstrap, docker exec and mariabackup, openstack commands) that require elevated/sudo privileges and will modify the host's system state and sensitive configuration data.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata