edgeone-makers-agents

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to ask users for environment variable values (secrets) and shows a CLI pattern (edgeone makers env set "") that requires embedding those secret values verbatim in commands/output, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Makers agent endpoints ingest outsider-authored free text from the HTTP request body (e.g., body.message) at runtime and pass it into the framework prompt (query() / run()), making indirect prompt injection possible.