geo-visibility-check

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to ask the user for an API key or authorization code and then insert it into code or configuration commands (e.g., client = XpozClient("THE_KEY_FROM_USER") or passing tokens via headers in shell commands), which creates an exfiltration risk as sensitive credentials pass through the LLM context.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses Xpoz tools (getRedditPostsByKeywords, getTwitterPostsByKeywords) to fetch external social media posts and community comments containing outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill instructs the agent at runtime to fetch and follow remote instructions from https://raw.githubusercontent.com/XPOZpublic/xpoz-agent-skills/main/skills/ai-answer-trace/SKILL.md if another skill is not locally installed.