spec-html-reader

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly requires preserving "exact contract blocks" and including "config snippets" and "object storage keys" from the source spec, which forces the LLM to reproduce any secret values present in the spec verbatim in its generated HTML.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The “Spec HTML Reader” workflow reads the user-provided spec content (and optional reference artifact) and renders it into a standalone HTML document, meaning arbitrary outsider-authored free text from the spec can be ingested directly at runtime.