customer-research

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill repeatedly instructs the agent to capture and output verbatim quotes from external sources (e.g., "exact words — don't paraphrase"), which would force the LLM to include any secret-like strings found in those sources verbatim, creating an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:17-20 (Mode 2) and SKILL.md:107-129 (Digital watering hole research) instruct the agent to gather online sources like Reddit/G2/forums and extract verbatim quotes/context, which are outsider-authored free text that would be read at runtime.