matlab-connect-opcua-client

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill requires passing usernames, passwords, and private-key passwords as positional string arguments to connect (e.g., connect(uaClient, "myuser", "mypassword") and connect(..., "keypass")), which forces the LLM to include secret values verbatim in generated code or commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads and ingests discovery results from opcuaserverinfo('localhost') (LDS-based server enumeration), where those results originate from other registered OPC UA servers that an outsider can potentially author/control to supply untrusted descriptive strings (e.g., ServerInfo(1).Description / endpoint metadata) before the agent selects a specific item.