manage-zerocopy-sapbdc

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the assistant to accept and embed an "invitation link" string into SQL (ALTER ZEROCOPY CONNECTOR ... INVITATION_LINK = '...') and to connect/validate that link, which requires handling and outputting a secret-like value verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow reads insider-provided free text only from the invoking user via conversational inputs (e.g., menu selection and “What business question would you like to answer?”) and then uses it to drive SQL against the user’s Snowflake data products/metadata, rather than ingesting arbitrary outsider-authored text from an external feed or queue.