librarian-indexer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill contains explicit, secret-looking values (e.g., "ghp_xxxxx" and a Supabase project id) and instructs creating/editing a .env with GITHUB_TOKEN, which encourages embedding secrets verbatim into configuration files or outputs—posing an exfiltration risk if the LLM is asked to populate or reproduce them.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes CI/setup commands that clone and install remote repositories which will execute fetched code at runtime (e.g., git clone https://github.com/OCA/maintainer-tools.git and git clone --depth=1 https://github.com/odoo/odoo.git and git clone https://github.com/OCA/oca-github-bot.git, plus pre-commit repos like https://github.com/pre-commit/pre-commit-hooks) so these external URLs are runtime dependencies that fetch and run remote code.