server-log-analysis-en

Before installing or running this skill: 1) Inspect config.yaml and remove any real credentials—do not keep plaintext passwords or private keys in the skill folder. Replace them with references to environment variables or an external secret manager. 2) Confirm that you explicitly consent to any SSH connections the skill will make and restrict connections to only authorized hosts. 3) Review the 'local_temp_dir' and ensure downloaded logs are stored in a controlled location, rotated, and deleted when no longer needed to avoid leaving sensitive data on the agent host. 4) Prefer SSH key-based auth and jump-host configuration rather than root/password; update config.yaml to use auth.method and auth.password_env or key references as suggested in reference.md. 5) If you need an audit trail, log when and what was downloaded and who authorized the operation. 6) If you cannot verify that config.yaml contains only placeholders, treat the bundle as potentially leaking secrets and do not use it until sanitized. If you want a safer setup, ask the skill author to remove credentials from the package and to declare the required environment variables (e.g., SSH_KEY, SSH_USER) in the skill metadata.