truto-unified-mappings

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes examples and flags that embed API keys directly on the command line (e.g., truto login --token <your-api-token>, truto profiles set-key firecrawl sk-..., --anthropic-api-key <key>, --firecrawl-api-key <key>), which would require an LLM to handle or output secret values verbatim if real keys are supplied.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Two URLs are direct install scripts (install.sh and install.ps1) served from an unverified/third‑party domain and are invoked with pipe-to-shell/iex patterns in the skill — a high-risk delivery method that can execute arbitrary code; the docs.acme.com URLs are benign documentation endpoints.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s required build workflow can ingest outsider-authored free text at runtime via --source-url (public web pages/docs or remote URLs) and/or global web tools (web_fetch/web_search) whose fetched content is used in the agent’s loop.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md includes one-time install commands that fetch and immediately execute remote scripts (curl -fsSL https://cli.truto.one/install.sh | bash and irm https://cli.truto.one/install.ps1 | iex), which clearly perform remote code execution during setup.