robot-bringup
Fail
Audited by Snyk on Mar 5, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The prompt includes a hardcoded plaintext credential (the Wi‑Fi password "securepassword" in the netplan example) and instructs embedding credentials in config files, which requires the LLM to output secret values verbatim and is therefore insecure.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit instructions to create/edit system files under /etc (systemd units, udev rules, journald and netplan configs), run sudo commands, modify firewall and watchdog settings, and even create a dedicated system user, which directly modifies the machine state and requires elevated privileges.
Audit Metadata