virtualmin-resellers

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The usage examples explicitly include plaintext passwords as command-line arguments (e.g., --pass secret), which requires the agent to handle and potentially emit secret values verbatim in generated commands.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs creating/deleting reseller and admin accounts and shows sudo usage for scripts that modify system-level user/accounts and resource limits, which directly changes machine state and requires elevated privileges.