infrastructure

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly shows a kubectl command that embeds an API key via --from-literal=api-key=, which requires placing the secret value verbatim into the command/output (high exfiltration risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill runs "helm repo add https://grafana.github.io/helm-charts" and then "helm install grafana/k8s-monitoring", which fetches Helm chart templates from https://grafana.github.io/helm-charts and installs/executes that remote manifest code in the cluster, so the repo URL is a runtime external dependency that results in executing remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill tells the user to edit /etc/alloy/config.alloy and to run systemctl reload alloy (and includes host-level exporter config), which require elevated privileges and modify system files/services on the host, so it pushes the agent to change the machine state.