dt-obs-ios-sdk

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly extracts user-provided DTXApplicationID and DTXBeaconURL and instructs the agent to embed those values verbatim into generated files (Dynatrace.plist) and command-line invocations, forcing the LLM to handle/output secret/config values directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs adding the Swift package URL https://github.com/Dynatrace/swift-mobile-sdk.git at runtime (via SPM/add_spm_dependency.rb and the build), which will be fetched and produce executable SDK code required for the integration.