web-publish

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to read database passwords from a project configuration file and pass them as command-line arguments to a PowerShell script (-Password), causing the secret value to be handled directly by the LLM and exposed in command execution outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow downloads the Apache HTTP Server installation archive from https://www.apachelounge.com/download/ if Apache is not already present locally, but this is a vendor download source rather than an outsider-submitted content channel.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill downloads Apache HTTP Server from a third-party site (apachelounge.com) during runtime setup, which constitutes an unofficial external operational dependency.