testing-patterns-ruby

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes literal credentials (e.g., options.authenticate('Administrator', 'password')) and demonstrates embedding them directly in test code, which requires the model to handle/output secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The integration test uses Testcontainers::DockerContainer.new('couchbase/server:7.6').start which pulls and runs the remote Docker image 'couchbase/server:7.6' at runtime, thereby fetching and executing external code that the skill relies on.