pachca-bots

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly tells the agent to ask the user for a Pachca token and to use it in CLI commands via a --token flag or export, which requires embedding the secret (or directing the user to paste it) and therefore could lead to the LLM handling/outputting the secret verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and parses user-generated webhook payloads (e.g., "new" message events and incoming webhooks) as part of its required workflow—see references/handle-incoming-webhook-event.md and references/webhook-events.md—so arbitrary untrusted chat content can be read and drive bot actions (commands, API calls, button handling).