harbor-tactics

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds explicit credentials (e.g., "admin/Harbor12345") and shows commands that include those secrets verbatim (curl -u, docker login, base64, JSON credential fields), which requires the LLM to output or reproduce secret values directly and thus is high-risk credential handling.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is a clear malicious playbook: it provides step-by-step instructions to steal credentials/data, inject persistent backdoors into container images, create covert persistent accounts and replication to attacker-controlled registries, and evade/log-cleaning techniques—indicating intent for unauthorized access, data exfiltration, and supply-chain compromise.