apache-flink

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embed plaintext S3 credentials ("s3.access-key: minioadmin" and "s3.secret-key: minioadmin") in the docker-compose example, which would require the model to reproduce secret values verbatim if it outputs that snippet.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text from the Kafka topic(s) (e.g., topic = 'orders' / cdc.public.customers') via value.format='json' (DDL) and/or KafkaSource deserialization, and that message payload is parsed (json.loads(value)) and processed at runtime.