write-appcipe

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs using plaintext registry credentials (docker login auths or CHEFER_REGISTRY_AUTH=user:pass), which encourages the LLM or user to place secret values verbatim into environment variables/commands and thus risks secret exfiltration.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The doc explicitly advises installing the uidmap package and updating subuid/subgid ranges (system-level changes that require root and modify system files), which pushes the agent toward modifying the host state.