vdms-dataprep-user

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill shows and instructs exporting MINIO_ROOT_USER/MINIO_ROOT_PASSWORD inline in a shell command (and tells the agent to "run commands yourself"), which requires embedding secret values verbatim on the command line and/or in the agent's output, creating a high exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow posts and ingests user-supplied video files and their associated multipart/form parameters (e.g., upload/summary text) into the VDMS DataPrep API endpoints, so outsider-authored free text can be ingested via runtime requests.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill fetches and writes remote scripts at runtime from https://raw.githubusercontent.com/open-edge-platform/edge-ai-libraries/main/microservices/visual-data-preparation-for-retrieval/vdms (curl -fsSL $RAW/setup.sh -o setup.sh) and then executes that fetched script via source ./setup.sh, so the raw.githubusercontent.com URL is a runtime external dependency that executes remote code.