t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
HIGHAuthorization escalation languageCHANGELOG.md:153 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 HIGHAccess to sensitive file pathsskills/aidp-aws-s3/SKILL.md:108 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05 HIGHAuthorization escalation languageCHANGELOG.md:175 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 HIGHAccess to sensitive file pathsskills/aidp-connectors-bootstrap/SKILL.md:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05 MEDIUMFile permission modification commandscripts/oracle_ai_data_platform_connectors/auth/wallet.py:104 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05 HIGHAccess to sensitive file pathstools/build_examples.py:530 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05 HIGHAuthorization escalation languageskills/aidp-jdbc-custom/SKILL.md:24 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 MEDIUMFile permission modification commandscripts/oracle_ai_data_platform_connectors/auth/wallet.py:4 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05 HIGHAuthorization escalation languageskills/aidp-jdbc-custom/SKILL.md:55 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01 HIGHAccess to sensitive file pathsskills/aidp-azure-adls/SKILL.md:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05