virtualmin-domains

Fail

Audited by Snyk on Jul 6, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill prompt includes an explicit command-line example embedding a plaintext password ("--pass secret"), which requires handling and outputting a secret verbatim and is a high-risk credential exposure pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo to run scripts that create, delete, clone, rename, and modify Virtualmin virtual servers (and includes actions like fixing permissions and quotas), which are privileged, system-state-changing operations that can create users and alter system configuration.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 6, 2026, 09:54 PM
Issues
2
Security Audit — snyk — virtualmin-domains