odoo-edi-connector

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The examples show plaintext credentials in code (e.g., pwd = "api_key") and demonstrate constructing authenticated XML-RPC calls, which encourages embedding secrets verbatim in generated outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests user-supplied EDI file contents (e.g., process_850(edi_file_path) reads an inbound EDI file via pyx12), and that EDI text is authored by an external trading partner, so it becomes LLM-readable prose in the agent context through the parsed transaction data/fields.