cdata-cli-python

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an example that passes a purchased product key directly on the command line (".\install-license.exe YOUR-PRODUCT-KEY"), which instructs embedding a secret verbatim into a command and thus creates an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs downloading and installing a Python wheel from https://maven.cdata.com/p/python/cdata--connector//cdata__connector--cp310-abi3-win_amd64.whl which fetches remote executable package code that will be installed/executed at runtime and is required for the skill.