pp-azure-devops

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill tells users/agents to save a Personal Access Token and explicitly shows the insecure pattern azure-devops-pp-cli auth set-token <your-pat> (and mentions setting AZURE_DEVOPS_TOKEN), which can force an LLM to emit the secret verbatim in a command.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to run azure-devops-pp-cli with --agent, whose output is then consumed by the agent; that output can include outsider-authored free text from Azure DevOps entities (e.g., PR/thread comments, wiki page content, work item fields) returned by the CLI at runtime, which the agent will place into its LLM context.