env-secrets-manager

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt contains multiple workflows and example commands that explicitly embed, search for, print, or replace secret values verbatim (e.g., aws/ vault/1Password/Doppler CLI examples with "sk_live_..." or "THE_LEAKED_VALUE", git replace-text, grep/echo of matches, and curl Authorization headers), so an agent following it would be required to handle/output secrets directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Credential Rotation Workflow explicitly queries public GitHub (e.g., gh api search/code and gh pr diff) and inspects PR diffs to detect leaked secrets, so the agent ingests untrusted, user-generated content from public repos and uses those results to drive rotations and git-history rewrites.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The .pre-commit-config references the remote repo https://github.com/gitleaks/gitleaks which the pre-commit framework will fetch at runtime and execute as a hook, i.e., fetching and running remote code during use.