pp-cloudflare

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes an explicit example that passes an API token as a command-line argument (cloudflare-pp-cli auth set-token YOUR_TOKEN_HERE), which instructs embedding a secret verbatim in a CLI invocation — a high-risk exfiltration pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source is Cloudflare Printing Press CLI via its live/internal commands and agent mode, which at runtime ingests free-form natural-language inputs from the caller to select and execute CLI operations (including possible “internal route” endpoints), so outsider text can influence what the CLI reads/parses from Cloudflare APIs without pre-selecting a specific trusted item.