dagster

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes a hard-coded database connection string with embedded username and password ("postgresql://user:pass@..."), which requires the LLM to include secret credentials verbatim in generated code, an insecure pattern that risks secret exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, the raw_users and raw_orders assets fetch JSON from external URLs (https://api.example.com/users and /orders) via httpx.get(...), and the returned response body is converted into pandas DataFrames (readable text/values) that are then passed into the Dagster LLM context through asset execution/logging/lineage.