google-workspace-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs pasting the entire redirected URL (which contains the OAuth authorization code) into a command-line argument (--auth-code "PASTE_THE_ENTIRE_URL..."), forcing a secret/authorization code to be embedded verbatim in a generated command, which is a high-risk secret-exfiltration pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md "Integration with Market Alpha Scout" section explicitly states the skill will authenticate to and scrape the public site stockbro.id and combine that scraped (public, untrusted) content with Google-based sentiment analysis to make stock-picking decisions, so the agent would read and act on arbitrary third-party web content.