Caveat verdict
model-migrate-flagos
A developer skill for migrating vLLM model implementations from upstream into a pinned vllm-plugin-FL project using standard git, pytest, and file copy operations — local development workflow with no credential access or external data exfiltration.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (7)
Accesses .ssh directory
README_zh.md · prose · downgraded · .ssh/
Instructs covert action — may act without user awareness
references/compatibility-patches.md · prose · downgraded · Silently
References sudo — requests elevated privileges
references/operational-rules.md · prose · downgraded · sudo
References SSH/GPG private keys
scripts/e2e_config.template.json · prose · downgraded · ssh_key
Long base64 string (100+ chars) — likely obfuscated payload
scripts/e2e_test_prompts.json · prose · downgraded · iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAIAAAAlC+aJAAAAy0lEQVR4nO3PMRLDQAhD0b3/pZNmC08q
Python urllib.request — network access
scripts/e2e_eval.py · prose · downgraded · urllib.request
Popular HTTP library — network access
scripts/e2e_eval.py · prose · downgraded · Got
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class B). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.