geomaster

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes code that constructs an AWSSession with aws_access_key_id and aws_secret_access_key provided inline (placeholders), which instructs embedding/exposing secret credentials directly in generated code or commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). High: the skill’s runtime workflows include fetching external web content (e.g., STAC/Planetary Computer via pystac_client.Client.open("https://planetarycomputer.microsoft.com/api/stac/v1") and search.get_items()), where returned item metadata/properties are parsed into Python objects and can be converted to LLM-readable text (e.g., via getInfo()-style calls or summarization) and thus can contain outsider-authored free text.