Missing User Warnings
Medium
- Confidence
- 88% confidence
- Finding
- The skill explicitly instructs users to expose the dashboard over Tailscale and defines persistent systemd services, but it does not include clear warnings about remote reachability, authentication, or the risks of running long-lived services. In the context of a mission-control dashboard with agent messaging, task execution, documents, and webhooks, network exposure materially increases the attack surface and could enable unauthorized access if the app is not hardened.
