competition-linux-credential-pivot

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires recording and demonstrating replayable artifacts (SSH keys, tokens, service-account secrets, env vars) and producing a minimal replay chain, which forces inclusion or reproduction of secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill explicitly documents recovering credentials (SSH keys, tokens, sockets), proving replay against accepting services, and constructing lateral pivot chains — behavior that facilitates credential theft, unauthorized access, and host compromise.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs collecting and replaying privileged credentials and references sudoers/setuid/systemd context and handing off to kernel/container escape, which directs privilege-escalation and bypass activities that can compromise the host even if it doesn't literally say "run sudo" or create users.