ssh-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill explicitly requests the user's SSH public key or root password and instructs the agent to embed those values verbatim into commands/config files (e.g., echo "<public_key>" >> authorized_keys and echo "root:" | chpasswd), which requires the LLM to handle and output secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill explicitly provisions persistent, publicly reachable root SSH access (including PermitRootLogin and optional password auth), registers a managed service that exposes a TCP endpoint, and instructs the agent to run without asking for confirmation — behavior that effectively creates a backdoor enabling remote root access and persistent remote code execution.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the agent to perform privileged actions—modify /etc/ssh/sshd_config, write to /root/.ssh/authorized_keys, set the root password, and register a public-facing SSH service—actions that require root/sudo and directly change and expose the machine's state and security posture.