web-vuln-graphql

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill repeatedly instructs placing a bearer token (AUTH_TOKEN) directly into curl Authorization headers and shows example token placeholders, which requires the agent or user to handle and include secret values verbatim in generated commands/requests.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests first-party generated GraphQL responses from an externally provided GQL_URL via curl (introspection schema/field outputs and error text in Step 1–3), which could include outsider-authored free text if the targeted GraphQL server is user-controlled.