dynamic-application-security-testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs supplying and embedding plaintext credentials (usernames, passwords, bearer tokens/API keys) into scanner configurations and command-line invocations (e.g., docker/zap command with -config values), which requires the LLM to handle and output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow performs DAST by crawling/spidering and actively probing the user-specified target URL(s), and the scanner ingests the target’s HTTP responses (including any free-form text returned by the application) into the agent/LLM context for findings/evidence—this is outsider-authored content from the target system’s responses, not authored by the operating user.