rails-hotwire-driver

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly describes reading OTP/magic-link codes from the development log and then submitting them verbatim (e.g., run submit_form.rb /otp "code=123456"), which requires the agent to handle and output secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, scripts/flow.sh calls scripts/readlog.sh request <x-request-id> which reads the Rails development log file (LOG_FILE, default ./log/development.log) and injects its extracted OTP/request lines into the shell variable log_slice and then into the grep/parsing flow; this log content is outsider-authored (by the Rails app/server and its mailer/OTP output), not authored by the operating user.