xiao-webcam-ap

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask the user for an AP password and then to "replace the placeholders literally" (including AP_PASS) in generated sketch files, which requires the LLM to output the secret verbatim and therefore risks secret exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In assets/web_collect.ino.tpl the hotspot’s web app (served at “/” on the board and fetched by clients from http://192.168.4.1) accepts outsider-authored free text for the label field and reflects it into the in-page gallery DOM via innerHTML/template rendering.