diagnosing-failed-warehouse-syncs

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask the user for an API key ("Paste the new key here when ready") and then directly embed that secret value into a tool call argument (job_inputs: {stripe_secret_key: "sk_live_..."}).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for diagnosing data warehouse syncs involves reading error messages and status details from external data source and schema APIs which may contain outsider-submitted connection settings, error strings, and webhook payloads.