aws-lambda-to-cloud-run-migration

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires reading generated manifests and explicitly instructs the agent to highlight hardcoded Client IDs, Client Secrets, and API Keys and to include source code snippets, which would force the LLM to handle and potentially output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow runs scripts/analyze_lambda.py over a user-supplied target directory and ingests the resulting migration_manifest.json (containing extracted free-text from that directory’s source/IaC files) into the agent context; if that directory contains outsider-authored code/config, that outsider text can flow into the LLM via the manifest.