local-eks-development

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill embeds real-looking secrets and passwords directly in config files and shell commands (env vars, kubectl/ AWS CLI with --secret-string/--from-literal, Keycloak realm JSON), which forces any agent reproducing or running these steps to handle and output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow (scripts/dev-up.sh) only ingests first-party, local configuration files and service-generated health endpoints while it applies a vendor-controlled Ingress-NGINX manifest from a fixed URL, but it does not read any outsider-authored free text from a queue/feed/inbox/ticket-like input.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script runs kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml which fetches and applies remote Kubernetes manifests at runtime, causing execution of externally-hosted code/configuration that the skill depends on.