detecting-attacks-on-historian-servers

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt embeds and uses API credentials (username/password and bearer token) directly in request code and examples—requiring the agent to accept and place secret values verbatim into HTTP auth headers/parameters, which is an insecure secret-handling pattern.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs active "Exploitation" and "Post-exploitation" steps (attempting to exploit CVE-2025-0921, document access, lateral movement), which encourages performing attacks that can compromise or modify the target systems even though the sample code is largely read-only.