Publish to Social

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs using the user's "Authorization: Bearer ma_..." token and shows a curl example embedding that bearer token in an Authorization header, which requires the agent to handle or output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Publish to Social only posts a user-supplied video_url/caption to connected social channels via POST https://api.agent-media.ai/v1/social/publish, and the workflow does not describe ingesting outsider-authored free text from a feed/queue without the user explicitly providing it.