cloudflare-temporary-deploy

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to parse and hand the temporary "claim URL" (which contains a claimToken and is credential-equivalent) to the user, requiring the LLM to extract and output a secret value verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Runtime path reads free text from wrangler deploy --temporary stdout/stderr via python3 scripts/parse_deploy_output.py (STDIN), which is not limited to first-party/trusted content and could include outsider-influenced text.