glab-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The reference includes examples that echo or pass tokens and secrets verbatim on the command line (e.g., echo "glpat-xxxxxxxxxxxx" | glab auth login --stdin, glab ci run-trig -t <CI_JOB_TOKEN>, glab variable set SECRET_TOKEN "s3cret"), which require embedding secret values directly in commands.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text can enter the LLM context when the user runs commands like glab issue view 42 --comments or glab mr view 123 (and similar --comments/--system-logs options), because the CLI fetches and renders comment/discussion body text written by other users, which the agent would then read/ingest as prose.