postiz

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill contains examples that embed secrets directly in shell commands (e.g., passing --client-secret on the CLI and exporting API keys inline), which encourages including secret values verbatim in generated commands and outputs, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow can ingest outsider-authored free text via integration tool outputs (e.g., postiz integrations:trigger ... getFlairs/searchSubreddits and similarly other tools), which return provider-derived strings that the agent is then used in post settings/content without any indication of sanitization/selection constraints.