python-sdk

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt contains examples that embed API keys and webhook URLs as literal string arguments (e.g., client = inference(api_key="inf_your_key"), webhook_tool(... "https://hooks.slack.com/...")), which encourages including secret values verbatim in generated code/commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs agents to perform web searches and ingest remote URLs (see references/agent-patterns.md RAG example using app_tool("search","tavily/search-assistant@latest") and references/tool-builder.md/internal_tools().web_search(True), plus references/files.md "Working with URLs"), so the agent is expected to fetch and act on untrusted public web content that can influence its tool use and decisions.