aeo

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt tells the agent to ask the user for API keys and then write those secret values into .env using an echo command (embedding them verbatim), which requires the LLM to handle and output secrets directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs npx goose-aeo@latest audit --json, which (per SKILL.md) “scrapes website pages” at runtime; scraped page body text is outsider-authored free text that can be ingested into the LLM context via the tool’s analysis/reporting.