writing-shape

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill requires the agent to read a user-supplied "pile" and to "pull a fragment" or "quote when the original wording is the point," which can force the model to reproduce input text verbatim — including any embedded secrets or credentials.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads an end-to-end markdown file of raw material provided by the user (“Read the pile. Read the input file in full”), so outsider-authored free text is ingested directly at runtime.