database-observability

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt includes plaintext credentials and connection strings (e.g., CREATE USER ... WITH PASSWORD 'secret' and data_source_name URIs containing 'secret'), which instruct the agent to embed secret values verbatim in SQL and Alloy config rather than using environment variables, so the LLM would need to handle/output secrets directly.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The prompt instructs modifying database server configuration (editing postgresql.conf and restarting PostgreSQL) and creating/granting users which change system and service state and likely require elevated privileges on the host, so it pushes actions that can modify the machine's state.