flutter-use-http-package

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt instructs adding access tokens to request headers and the example hardcodes an Authorization header ('Bearer token_here'), which encourages embedding secrets verbatim in code/output and thus risks secret exposure.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow performs runtime HTTP GET requests to an external API (e.g., client.get(Uri.parse('https://api.example.com/products'))) and then passes the fetched response body (response.body, arbitrary server text) into the LLM context via compute(parseProducts, response.body) for JSON decoding/mapping.