writing-shape

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires the agent to read a user-supplied "pile" and to "pull a fragment" or "quote when the original wording is the point," which can force the model to reproduce input text verbatim — including any embedded secrets or credentials.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill explicitly instructs the agent to “Read the input file in full” (the user-provided raw markdown pile) and then “mine the pile” to write the output article, so at runtime the LLM ingests outsider-authored free text whenever the passed markdown file is not authored by the operating user.