virtualmin-users

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The usage examples and script invocations include plaintext passwords as command-line arguments (e.g., --pass secret / --pass newpassword) which requires the LLM to handle and reproduce secret values verbatim, creating a high exfiltration risk.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill instructs creating, deleting, and modifying system users (including protected/FTP users) and shows example commands using sudo, which directly modify machine state and require elevated privileges.