atlassianapi

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The prompt demonstrates and encourages embedding API tokens/passwords directly into code (e.g., HTTPBasicAuth('email', 'API_TOKEN') and password='API_TOKEN'), which would require the agent to place secret values verbatim into generated requests or code and thus risks exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s Jira/Confluence webhook handler ingests request.json from external Atlassian webhook POSTs (e.g., issue/changelog/sprint fields authored/controlled by other users) and then passes that data into handler functions that can be used to form LLM context, creating an indirect prompt-injection path via outsider-authored free text.