prefect-workflows

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.85). The skill includes examples that embed secrets directly (CLI --key, hard-coded connection string, and literal webhook URL), which instruct an agent to place secret values verbatim into commands/code and therefore creates an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains a runtime pull step that clones and executes code from the repository URL https://github.com/my-org/data-platform.git and references container images (ghcr.io/my-org/data-platform and ghcr.io/my-org/data-platform:latest) which are pulled and run by workers, meaning remote content is fetched at runtime and can execute code.