deploying-edr-agent-with-crowdstrike
Fail
Audited by Snyk on Mar 16, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill instructs embedding tenant credentials (CID) and API client ID/secret into install commands and integration configs (e.g., CID=<YOUR_CID>, "Enter API Client ID and Secret"), which requires the agent to handle and output secret values verbatim in commands/configs.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill contains explicit, step-by-step instructions to install privileged agents (sudo/installer commands), start/enable system services, and modify system/MDM configuration—actions that change system state and require administrative/root privileges.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata