rails-dip

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt contains multiple hard-coded plaintext credentials (e.g., POSTGRES_PASSWORD: password, DATABASE_URL with password, mysql -ppassword, SECRET_KEY_BASE: test123), so an agent following or reproducing these templates would need to handle and could output secret values verbatim, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md onboarding steps explicitly instruct cloning a public repository ("Complete Example: New Developer Onboarding" — git clone https://github.com/company/project.git), which pulls untrusted third‑party repository files (e.g., Dockerfile, dip.yml) that the toolchain will execute/use and thus could materially influence behavior.