linux-shell-scripting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes hard-coded credentials (e.g., db_pass="password") and patterns that pass or echo secrets verbatim (mysqldump -p"$db_pass", printing generated passwords), which requires the agent to handle and output secret values directly.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit state-changing operations (useradd/passwd, sudo apt-get installs, sudo systemctl restart/start, crontab modification, rm/find deletions, and remote script execution) that create users, install packages, alter services, schedule tasks, and remove files — all actions that modify the machine and often require elevated privileges.