alicloud-compute-fc-serverless-devs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt includes examples that pass AccessKeyID/AccessKeySecret directly on the command line and in literal JSON env vars (e.g., --AccessKeySecret , export default_serverless_devs_key='... "AccessKeySecret":""'), which would require an agent to include secret values verbatim in generated commands or outputs.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill repeatedly instructs running commands with sudo (global npm install, config, init, deploy, invoke, remove), which requests elevated privileges and can modify the host system state, so it should be flagged.