frappe-testing-cicd

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt embeds plaintext passwords and database credentials (e.g., MARIADB_ROOT_PASSWORD: db_root, POSTGRES_PASSWORD: db_root, --admin-password admin, --db-root-password db_root) directly in CI/service configuration and CLI commands, which requires the agent to output secret values verbatim.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The CI workflows and pre-commit configuration fetch and execute remote code at runtime from external repositories (e.g., GitHub Actions and actions like https://github.com/actions/checkout, https://github.com/returntocorp/semgrep-action, https://github.com/codecov/codecov-action and pre-commit hooks such as https://github.com/pre-commit/pre-commit-hooks), which are required runtime dependencies that run external code in the workflow.