cf-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes explicit examples and commands that embed secrets verbatim (e.g., cf auth username password, cf create-user-provided-service '{"password":"secret"}', cf oauth-token) and asks the agent to produce precise, runnable cf commands, which can force the LLM to include user-provided secrets in output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes a runtime command that adds the plugin repository https://plugins.cloudfoundry.org (cf add-plugin-repo ...) and then uses cf install-plugin (and related install steps like npm install -g mbt) which will fetch and install/execute remote plugin/tool code from that repo, so this URL is a runtime external dependency that can deliver and run remote code.