robot-bringup

Fail

Audited by Snyk on Mar 5, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The prompt includes a hardcoded plaintext credential (the Wi‑Fi password "securepassword" in the netplan example) and instructs embedding credentials in config files, which requires the LLM to output secret values verbatim and is therefore insecure.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit instructions to create/edit system files under /etc (systemd units, udev rules, journald and netplan configs), run sudo commands, modify firewall and watchdog settings, and even create a dedicated system user, which directly modifies the machine state and requires elevated privileges.
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 5, 2026, 09:16 AM