skills-security-check

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt requires reading target files and embedding exact code snippets and hardcoded credential occurrences (API keys/tokens/passwords) in the generated audit report, which forces the model to output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md (Step 4: "远程脚本内容深度分析") explicitly requires using web_fetch to fetch and analyze remote URLs/scripts from the open web, so the agent will read untrusted third‑party content that can materially influence its risk determinations and next actions.