devsecops

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes CI/CD steps that fetch and execute external code at runtime (e.g., kubectl apply -f https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.24.0/controller.yaml and GitHub Action references like aquasecurity/trivy-action@master / trufflesecurity/trufflehog@main) which are runtime external dependencies that will execute remote code if run.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)