virtualmin-domains
Fail
Audited by Snyk on Jul 6, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill prompt includes an explicit command-line example embedding a plaintext password ("--pass secret"), which requires handling and outputting a secret verbatim and is a high-risk credential exposure pattern.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo to run scripts that create, delete, clone, rename, and modify Virtualmin virtual servers (and includes actions like fixing permissions and quotas), which are privileged, system-state-changing operations that can create users and alter system configuration.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata