aspire-monitoring

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly tells agents to capture the dashboard login token printed by aspire dashboard run and then embed that token verbatim in CLI invocations (e.g., as ?t=TOKEN in --dashboard-url), which requires the LLM to handle and output secret values directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests application-generated free-text telemetry/logs (including browser console/network data surfaced in the Aspire Dashboard) via commands like aspire otel logs/aspire logs/aspire otel traces, so an outsider who can cause their own content to be logged/OTLP-emitted could poison what the LLM reads.