telemetry-ops

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit SNMP community string ("public") and a sample prompt to "Configure the Catalyst 9300", which would require the model to emit that credential verbatim when producing device configuration—an insecure secret-handling pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text via the syslog receiver (udp/514) and likely other externally submitted telemetry payloads, meaning an outsider can post malicious messages into the monitored syslog feed.