competitive-intel

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly asks the user to paste API keys/codes and shows examples that embed those secrets verbatim into client constructors and command headers (e.g., XpozClient("THE_KEY_FROM_USER"), export XPOZ_API_KEY=..., and passing Authorization=Bearer {token}), requiring the LLM to handle/output secrets directly.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s “Step 2: Fetch Data for Each Brand” uses Xpoz tool/SDK calls (getTwitterPostsByKeywords/search_posts, getRedditPostsByKeywords/search_posts) that ingest outsider-authored social text (tweet “text”, Reddit “title”/“text”) returned by those queries into the runtime for “Step 3: Analyze and Compare” and “Step 4: Generate Report”.