ensure-pipelines-host

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill repeatedly instructs embedding OAuth/access tokens and host tokens into Authorization headers and CLI args (e.g., --bapToken, Authorization: Bearer {BAP_TOKEN}, --hostToken), which requires the agent to handle and output secret values verbatim in generated commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill ingests outsider-authored free text only from within the user's interactive prompt (“Other (paste URL)” / env URL selection in Phase 3.C Step 2/3), rather than from any monitored outsider-controlled feed/queue or automatic outsider content source.